Operating System Authentication Support

Download this manual as a PDF file

This section describes what Skylar One (formerly SL1) supports for authentication to the appliance operating system (OS). The other topics in this section describe authentication to the Skylar One user interface.

Non-Repudiation Support

Non-repudiation is the ability to attribute each OS login and action to one specific individual.

Skylar One appliances do not natively support non-repudiation for OS authentication.

Unsupported Configurations

Any change that you make to theSkylar One appliance OS to enable non-repudiation is an unsupported configuration. These changes include:

  • Adding local OS users other than em7admin
  • Changing the OS authentication methods
  • Enabling multi-factor authentication (MFA), single sign-on (SSO), or Security Assertion Markup Language (SAML) for OS users
  • Joining the appliance OS to a domain. A domain join changes the operating model of the platform, which uses one shared OS account, em7admin. Because all OS logins use this account, joining the OS to a domain means you cannot track which individual logs in.

Additional Resources

For more information on this topic, see the knowledge base article Best Practice for Controlling and Auditing Administrative CLI Access to Skylar One Appliances.