Home
Vantage
Learn how Vantage uses the power and simplicity of SaaS to deliver unmatched security and visibility across your OT, IoT and IT networks.
Administrator Guide
Information about the Administration section of Vantage, and the tasks that you can do in this part of the software.
Administration
Teams
Groups
The Groups page shows all the user groups in your organization, and lets you create and configure groups.
Use Vantage as the IdP for a group
Learn how you can use Security Assertion Markup Language (SAML) and Vantage as Identity Provider (IdP) to authenticate your sensors.

Vantage
Learn how Vantage uses the power and simplicity of SaaS to deliver unmatched security and visibility across your OT, IoT and IT networks.
- Introduction
  An overview of Vantage.
- Administrator Guide
  Information about the Administration section of Vantage, and the tasks that you can do in this part of the software.
  - Administration
    - Administration page
      The administration page lets a user with administrator privileges configure settings and do other tasks.
    - System
    - Teams
      - Organizations
        The Organizations page shows your organizations, which are logical subdivisions within your Vantage account.
      - Groups
        The Groups page shows all the user groups in your organization, and lets you create and configure groups.
        Roles and permissions
        A list of the default roles and permissions in Vantage.
        Add a group
        The Groups page lets you add a new user group for your organization.
        Assign a role to a group
        Once you have added a new group to Vantage, you need to assign a role, or roles, to the group.
        Propagation settings
        The Propagation settings page allows you to propagate a group to sensors, configure remote group permissions, and define scope restrictions. You can also enable single sign-on (SSO) through Vantage, allowing users to authenticate using their Vantage credentials. If SSO is disabled, the group functions as a local group on the sensors.
        Propagations
        The Propagations page shows which sensors the groups have been propagated to.
        Use Vantage as the IdP for a group
        Learn how you can use Security Assertion Markup Language (SAML) and Vantage as Identity Provider (IdP) to authenticate your sensors.
        Connect a Guardian sensor with Vantage as IdP (example)
        This example shows you how to connect a Guardian sensor to Vantage and assign users to a group named Admin. This will lets the users to use Security Assertion Markup Language (SAML) to log in to the sensor.
      - Roles
        The Roles page shows all the assigned user roles in Vantage. It also lets you create new roles, and manage permissions and access levels efficiently.
      - Users
        The Users page shows all the users that have been assigned in Vantage.
      - API keys
    - Organization Settings
  - SAML integration
- User Guide
  Information about the main features of Vantage and the tasks that you can do from the user interface (UI).
- Print format documentation
  A list of all the print-format documentation that is available for Vantage.

Use Vantage as the IdP for a group

Learn how you can use Security Assertion Markup Language (SAML) and Vantage as Identity Provider (IdP) to authenticate your sensors.

To enable your sensors to be able to use Vantage to log in, you need to propagate the groups to all those sensors for which you want to enable single sign-on (SSO). The correct security assertion markup language (SAML) configuration will be also be propagated to the sensors.

Metadata XML

Each sensor has its own SAML metadata file, which is located at <VANTAGE_URL>/api/v1/idp/<SENSOR_ID>/saml/metadata

Note:

Only admin users can access the SAML metadata resource.

Sensor URL

The Sensor URL is a sensor setting which represents the uniform resource locator (URL) of the sensor that the browser accesses. It is used for the SAML response callback.

To edit the Sensor URL, open the details page for the applicable sensor and go to Settings > Sensor URL.

Sensor URL field — Figure 1. Sensor URL field

Note:

When a sensor is connected to Vantage, and a valid Nozomi URL has been previously set, it automatically sends its Nozomi URL. When Sensor URL is modified in Vantage, it will be propagated to the sensor, and will overwrite the existing Nozomi URL.

Use cases

Guardian(s) connected directly to Vantage, with no Central Management Console (CMC)s: No action is required.

Guardian(s) attached to a CMC, which is attached to Vantage:

If configuration is pushed on Guardians, the Go to sensor feature on the CMC using SSO will not work. (The Go to sensor feature on the CMC with local user will continue to work.) It is recommended that you:
- Only push groups to the CMC that is directly attached to Vantage
- Continue to manage the SSO to the Guardian from this CMC
If Go to sensor feature on the CMC using SSO is not used, no action is required.