Reference Guide
...
SSH Proxy
SSH Proxy Connections

Global Username/Password Connection

2min

Privileged users (such as root, super user, etc.) in the target device are called Global Users. To establish an SSH connection using these accounts, and to make the global user password invisible to local users, the configuration outlined below must be in place, allowing Single Connect to store the global user credentials to be used for the connection in its database.

  1. Navigate to Device Management > Device Groups.
  2. Right-click the device group and select the Show Properties option.
  3. Set the privileged target device’s username as globalUsername.
  4. Set the account password as globalPassword.
Global User Credentials
Global User Credentials


When connecting to a device with a global username via an SC proxy, priority rules are applied:

  • First priority: if there is a defined SAPM account, the SAPM password or the rotated SSH Key is used for the GlobalUser authentication.
  • Second priority: if the SAPM account is not defined, the global SSH Key is used to connect to the device.
  • If these two options are not defined in the device properties, the global password is used to connect to the device. The global password has the least priority.
  • If the device requests both the SSH Key and password for authentication, the SAPM account password is used as first priority, and the globalPassword is used as second priority.