How to enforce SAML login for CommCell Console

@DMCVault 

@BSircy - Please take a look at the following additional setting.

https://documentation.commvault.com/additionalsetting/details?name=forceSAMLLogin

This setting is only for command center and webconsole not java gui.  The correct answer is from Amey above.  We will look to document the correct key for this use case.

@Amey Karandikar that key worked. The only potential issue there is if SAML or AD is broken, there is no way to access the environment. Is there a way to either remove the additional setting outside of the GUI or allow a local admin account (not domain accounts) access?

This key can be applied at multiple entities:  It can be set at user, user group, company , or commcell level

My suggested approach would be to apply this at a group level - and have a secured local “break glass” account not a part of the group.  So in your scenario you would always have a backup account you can login with.