Using an SSO Client to Log In to a Host Resource for Operation

Supported Protocols and Clients

Table 1 list the protocols that support SSO-based operations as well as supported clients and versions.

Precautions

If SecureCRT is used for operation, you need to configure the ssotool.conf file based on whether a password is required for login using the local SecureCRT. Otherwise, the operation connection will fail.

• Using SecureCRT without a password

  In the installation path of the SSO tool, open the ssotool.conf file and add the comment tag # before SecureCRTPassphraseSHA256= to comment out the line. For example:

  #SecureCRTPassphraseSHA256=

• Using SecureCRT with a password

  In the installation path of the SSO tool, open the ssotool.conf file, set the SHA-256 value corresponding to the login password after SecureCRTPassphraseSHA256=, and ensure that this line is not commented out. For example:

  SecureCRTPassphraseSHA256= SHA-256 value corresponding to the login password of SecureCRT

Prerequisites

• Your role has the management permission for the Host Operations module. For details about how to check the permissions of each role, see Role.
• You have installed the supported client tool on your local PC. For details, see Supported Protocols and Clients.

Step 1: Download the SSO Tool (Required for the First Login)

1. Log in to your bastion host system.
2. Click in the upper right corner to go to the download center.
3. On the Common Tools tab, click on the right of SSOTool Windows to download the tool to your local PC.
4. Double-click SsoTool.msi and install the tool on the local PC as prompted.

Step 2: Configure the Client Path of the SSO Tool (Required for the First Login)

The following uses Xshell as an example. The procedure for configuring the path of other clients is similar.

1. Start the local SSO tool.
2. Click next to Xshell Path.
   Figure 1 Configuring the Xshell path
   

3. Select the .exe file of the Xshell tool from the absolute path where the Xshell client is installed, and click Open.
4. Go to the SSO tool configuration page and view the selected Xshell client path.
5. Click Save.

Step 3: Set the Operation Mode to Client-based Operations

1. Log in to your bastion host system.
2. In the navigation on the left, choose Operation > Host Operations to go to the Host Operations page.
3. Click Web OPS Settings in the upper right corner.
4. Select Client for Operation Type for the corresponding protocol as required.
   • RDP: On the RDP tab, select Client for Operation Type. If your RDP client is disabled, disable Disable RDP Client in Configuring Client Login.
   • SSH: On the SSH tab, select Client for Operation Type.
   • FTP/SFTP: On the FTP/SFTP tab, select Client for Operation Type.
   • Telnet: On the TELNET tab, select Client for Operation Type.

5. Click OK.

Step 4: Log In to a Host for Operations

1. Log in to your bastion host system.
2. In the navigation on the left, choose Operation > Host Operations to go to the Host Operations page.
3. Quickly search for the target host.
   1. Expand Resource Group on the left to check the resource group view.

      In the Personal Resource Group or Public Resource Group area on the left of the content pane, click a resource group name. Then only the host or database resources in the selected resource group will be displayed in the list. If no resource group is selected, all host or database resources are displayed by default.

   2. Above the host list, enter a keyword in the search box to quickly search for resources by host name or address.

4. Select a host with the target protocol type (SSH in this example) and click Login in the Operation column.

   The client tool selection window is displayed.

5. Select the client tool (for example, Xshell) installed on the local PC and click OK.

   The system automatically calls the client tool to log in to the host.