Skip to main content
commvault.com commvault.com

Hi everyone,

We enabled 2FA on our customer’s environment and we disabled SSO. Customer is using one specific domain user for Delphix and it connects Commvault enviroment with SSO.

https://docs.delphix.com/docs537/delphix-administration/sql-server-environments-and-data-sources/virtualizing-databases-using-delphix-with-sql-server/managing-sql-server-dsources/additional-dsource-topics/linking-a-dsource-from-a-commvault-sql-server-backup

 

We don’t want to enable SSO because of the 2FA.

https://documentation.commvault.com/11.24/expert/7907_enabling_two_factor_authentication_at_commcell_level_in_commcell_console_administrator.html

 

Is it possible to enable SSO only for this specific domain user with additional settings or something?

 

I think the only way to accomplish this is by configuring it the other way around. Disable 2FA force on CommCell level en enable it on group level so you can still leverage SSO. 

Hi,

Thank you for your reply. Actually we enabled it from group level. We followed this steps;

https://documentation.commvault.com/11.24/expert/107055_enabling_two_factor_authentication_at_commcell_level_administrator.html

We enabled 2FA only for 2 domain groups. But when we enabled SSO, 2FA not working for this groups. It’s automatically log in to console.

Hi,

Commvault’s answer;

Using the SSO it is not possible to use the Two Factor Authentication.
 
If you need to use the 2FA then you need to disable the SSO. There is no way to use both the settings in Commcell Environment.
 
https://documentation.commvault.com/11.24/essential/107051_enabling_two_factor_authentication_at_company_level_administrator.html

 https://documentation.commvault.com/11.24/essential/107055_enabling_two_factor_authentication_at_commcell_level_administrator.html

 

Terms & ConditionsCookie settings