SAML/LDAP for NX Cloud for SSO across server locations?

In Progress

Follow

Luke McFadden

• October 12, 2019 02:23

We’re transitioning to NX for our organization. We have multiple sites around the world (9 currently), and our access needs are local and remote. LDAP works great for local only accounts. But we have a lot of staff who need to remotely access one or more servers. So LDAP doesn’t work for this use case. Each location has 3-4 staff that need remote access to an individual server. And then we have 10+ staff that need remote access to multiple servers. We use JumpCloud for SSO, so being able to use SAML for adding users to NX Cloud, and then assigning server permissions would be ideal. This would work with our security policies and allow us to continue to standardize and enforce passwords policies and MFA. And in the event of a staff issue, we can terminate access quickly from JumpCloud

0

• 

  Luke McFadden

  • October 29, 2019 07:22

  Any potential feedback or update on this?

  0

  Comment actions Permalink
• 

  Norman - Nx Support

  • July 16, 2021 08:18
  • Edited

  Hi Luke McFadden,

  Unfortunately, such features are not being worked on at the moment. We understand your eagerness to have this request implemented, so we will take your feedback into account for future feature discussions.

  We are working on LDAP improvements and 2FA for the cloud users though. 
  
  Please feel free to send us any other comments or questions and have a great rest of your day!

  0

  Comment actions Permalink
• 

  Iwan Bourgonje

  • February 16, 2021 15:42

  Hi I made an ldap connection .  

  Our users want to use the email addresses to log in.

  Is it possible to customize it?

  Or is there any other way to log our users in with the email address

  We use SAML for other applications

  0

  Comment actions Permalink
• 

  Veronika Nazarova

  • February 17, 2021 11:32

  Hello, Iwan Bourgonje

  Thank you for your question. Sad to say, it is impossible to configure which field from LDAP to use as login in NX. Moreover, in the latest versions it is impossible to create local users with login in the form of an email address.

  0

  Comment actions Permalink
• 

  michael reijerse

  • July 16, 2021 06:59

  is there already any progress in luke his question i have the same problem/question for our customer 

  they also wanna use ldap with cloud accounts with azure active directory or something like that so they can use password policy's 

   

  on local account ldap works great buth for phones on cloud they also want something like that ? 

   

   

  0

  Comment actions Permalink
• 

  Veronika Nazarova

  • July 22, 2021 10:16

  Hi michael reijerse

  We plan to start investigating and designing this feature soon. Very likely it will be included into the release after the upcoming release. 

  0

  Comment actions Permalink
• 

  Simon King

  • November 02, 2022 13:02

  Hi Support,

  Has there been any update to Lukes request, I note Veronika mentioned the feature was being looked into but haven't seen anything in v5.0 to say that it's been implemented?

  For clarity, we're looking for SAML/SSO authorization for remote access.

  All the best,

  Simon.

  0

  Comment actions Permalink
• 

  Luke McFadden

  • November 02, 2022 15:35

  Ditto to Simon King, this is still an important feature for us.  Utilizing our normal Identity provider helps us have tighter control over security, access logs, and conditional access.  

  We use our IdP currently for local users via LDAP, which is fine, but for Cloud users, it would be infinitely better to have those controlled as well.

  SCIM would be great too for provisioning users, but I'll settle for SAML for authentication!

  0

  Comment actions Permalink

Please sign in to leave a comment.