Assigned Credentials

assigning credentials correlates different single connect users with specific local or active directory (ad) users or groups in target systems it sets up the connection towards the target system by matching the single connect users or groups with local or ad users in proxy connections, the target device’s credentials are either entered as a global username/password or they can be retrieved from the password vault in either situation, the users use just one local user to connect to the target device, and these credentials are defined for the whole device group in some cases, different users might need to connect to the same devices with different user accounts in this case, assigning credentials will let different single connect users connect to target devices with different sapm accounts also, as mentioned above, user groups can be retrieved from active directory credentials that are kept in sapm can be assigned to ad user groups, as well as users if a specific device or device group is selected in the assigned credentials definition, the user can use the sapm account defined in the selected device connection this process applies to devices for the selected device or device group, or you can use the apply for all devices option in the example illustrated above, the users are connecting to target devices with and without assigned credentials in the first diagram, single connect users a, b and ad user groups use the same local/ad user accounts to connect to the target devices in the second diagram, assigned credentials were configured between single connect user a and local/ad user a, and between single connect user b and local/ad user b, which allowed single connect user a to log in to target devices as local/ad user a, and single connect user b to log in as local/ad user b defining the assigned credentials allows using the defined accounts in active directory, ldap, winrm, and smb strategies to connect to different devices but first, you must configure the local/ad user as a dynamic password controller account to use assigned credentials see the related sections in this document for configuration details to configure assigned credentials navigate to user management > assigned credentials enter the single connect user or user group in the user selection field and select credentials source enter the sapm account name to be used to connect to the target devices in the sapm account field and click save fill in the device or device group fields if the user wants to connect to a specific device (optional) check the apply for all devices box if the user wants to connect to all devices (optional) navigate to device management > device groups right click the device group that will connect to the target devices via assigned credentials and selects show properties define the following configurations property key addassignedcredentialtouserselection value true