One Identity Safeguard for Privileged Passwords entry

Devolutions offers One Identity Safeguard integration in Remote Desktop Manager. Leveraging this entry, users can securely retrieve their privileged passwords stored in an external One Identity Safeguard vault without leaving Remote Desktop Manager, eliminating the need for manual input.

If the integration does not work in Remote Desktop Manager, it might be because your appliance's OAuth2 Grant Types do not include the Resource owner. See One Identity's documentation for more details.

The One Identity Safeguard integration requires either Remote Desktop Manager Team edition or the Privileged access management solutions package license.

Creating the entry

1. Open Remote Desktop Manager.
2. Add a New entry – Credential management – One Identity Safeguard.
3. Choose a name, a folder, an Authentication method, and enter the required One Identity Safeguard credentials and configurations in the entry's General tab (Username, Password, Asset, Account).
4. Click on the Add button.

Check Request credentials from One Identity Safeguard entry in Remote Desktop Manager for more details on the checkout process.

One Identity Safeguard general settings

Here is a list of the General settings available in the One Identity Safeguard entry interface, along with what they do:

SETTINGS	DESCRIPTION
Resolving mode	Choose a resolving mode between: - Injection: Retrieves One Identity username and password, in order for them to be injected into sessions. - Privileged session: Retrieves temporary information from One Identity’s Safeguard for Privileged Sessions proxy to use in sessions.
Host	Set the One Identity host. The Host field is intended for a resolvable hostname, such as a hostname or a fully qualified domain name (FQDN), and should not include a URL.
Use “My account settings”	When this option is checked, an entry uses the credentials previously set up in File – My account settings instead of those entered in the Username and Password fields.
Authentication method	Set Authentication method to Local, External Federation, or Active Directory. If you select Active Directory, the Provider field appears. Select an Active Directory provider using the … button.
Username	Enter the relevant One Identity Safeguard vault username.
Password	Enter the relevant One Identity Safeguard vault password.
Always ask password	Check this option to send a password prompt every time the entry is used.
Asset	Choose the relevant asset in the account selected. The asset field is automatically filled upon choosing an account from the list.
Account	Choose from a list the relevant account to connect to.
Always prompt with list	If this option is checked, the entry always sends a prompt asking to choose from the account/asset list whenever used.