Symantec Access Management

 View Only
  • 1.  Record login to the AdminUI in the smaccess.log

    Posted Aug 14, 2019 09:59 AM
    Hello,

    Is there a way to record logins to the AdminUI in the smaccess.log ?

    Already setup audit log in the smconsole and Enable Enhance Tracing to 1?

    I can see a record in the server.log when I activate the debug ...
    Please note that I can see AdminLogin information when using APIs (POST token)

    PS/AdminUI 12.8SP1


    ------------------------------
    Rgds,
    Julien.
    ------------------------------


  • 2.  RE: Record login to the AdminUI in the smaccess.log

    Broadcom Employee
    Posted Aug 14, 2019 10:26 AM
    I recommend protecting the AdminUI with the Access Gateway.  It's a straight-forward config and will capture the logins in smaccess.log.  There are other benefits such as leveraging 2FA authentication schemes.


  • 3.  RE: Record login to the AdminUI in the smaccess.log
    Best Answer

    Broadcom Employee
    Posted Aug 15, 2019 02:11 PM
    Hello Julien,
    It's good to see you here on the communities. 

    This is my preferred method of managing access to the Policy Server Admin UI. 
    More information can be found here. 

    https://docops.ca.com/ca-single-sign-on/12-8/en/configuring/policy-server-configuration/start-the-administrative-ui-and-manage-objects/protect-the-administrative-ui-with-ca-single-sign-on

    If you have any questions along the way, let us know. We would be happy to help.

    -James