Enabling SSO for DNA Console Operators

To prevent your DNA Console Operators from needing to enter their Operator password to login, it is possible to enable SSO. The SSO works by authenticating the logged-on user against an AD Security Group that is specified within the Operator roles.

Assigning an AD Security Group to an Operator role to create new operators

1. Log onto the NetSupport DNA Console with administrator permissions.
2. Select the Settings tab.
3. Click Operators.
4. In the Operators dialog, click Roles.

5. Select one of your existing roles from the drop-down menu or click the + symbol to add a new role.
   Note: To ensure you can still sign in manually, we recommend enabling SSO against roles you have created yourself, rather than the built-in “Admin Role”.
6. With your role selected, click the icon next to the Active Directory Group field.
7. Clear the Select none option and then expand your domain name.
8. Select an AD Security Group which contains the Console Operators that you wish to enable SSO for and click OK.

9. Click OK to confirm the changes you have made to the role.

After assigning the AD Security Group to a role, the next time a user who is a member of the specified group launches the DNA Console, they will be signed in automatically and an Operator account will be created for them with a name with matches their AD logon name, e.g. j.bloggs.

Switching existing Operator accounts from manual logins to SSO
If you have already created your Operator accounts manually and you would like to switch these to SSO using AD Authentication, it is possible to do this by renaming an existing Operator account to the AD logon name of the user who you wish to AD authenticate.

1. Select the Settings tab.
2. Click Operators.
3. Select the required Operator and select Properties 

4. Change the Operator name to the AD logon name for that user. In this example, we are changing the name from Joe Bloggs to j.bloggs.
5. From the Permissions section, select Operator.
6. From the Role drop-down menu, choose the role you have created with the AD Security Group assigned to it.

7. Click OK to save the changes to the Operator.

After making the above changes, the next time the user launches the DNA Console, they will be signed in automatically via AD Authentication and will be associated with their existing Operator account, rather than a new account being created for them.