Guest User!

You are not Sophos Staff.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 6 replies
  • Subscribers 5 subscribers
  • Views 17841 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSP for different users

Ross86

Hi All,

I've got the SMC setup and configured with 3 devices deployed via SSP.  However these are all on one profile and in one group.

How do I deploy a different task bundle to a different user.  For example I have an AD group called MDM with the users in, they sign into the SSP and go through works fine.

I want a different task bundle deployed but can't see where I can have multiple AD groups to acheive this.  I have one company user and couldn't work it out so had to deploy the standard BYOD task bundle/profile and then redeploy the company profile afterwards.

I have for example a group called IOS Devices, points to employee IOS and company IOS compliance rules, but then the SSP can only seem to use one task bundle.

Another issue is how does everyone deploy company devices, do you use the SSP or create device?  If so can you please explain as create device just seemed to be a lot of effort and didn't appear to work very well.

How does everyone work around this?

Thanks!

Ross

:54885


This thread was automatically locked due to age.
Parents
  • 0

    Hi Ross,

    if you want to deploy different configurations via the Self Service Portal based on LDAP group memberships you can use the "Group settings". Log in to the SMC web console and go to "Settings | Self Service Portal".
    Switch to the "Group settings" tab.

    In here, you can specify different configurations for different LDAP groups.

    Right now it seems as you only have the default configuration in there.

    You can either specify one specific group using the full Distiinguished Name of the group or use wildcards, e.g. Sales*
    During the user login the SMC server will verify which configuration will apply. The server will verify if the first entry applies to the user and if not, check the next one until one group matches.

    Regarding the comapny device issue, it would be good to get additional information.
    You have the possibility to create them manually (see chapter 15 of the admin guide) or import a list of devices using a CSV file. Please have a look at our KBA 120539 for additional information on the import.

    I hope this helps.

    Best regards

    Stefan

    :54929
Reply
  • 0

    Hi Ross,

    if you want to deploy different configurations via the Self Service Portal based on LDAP group memberships you can use the "Group settings". Log in to the SMC web console and go to "Settings | Self Service Portal".
    Switch to the "Group settings" tab.

    In here, you can specify different configurations for different LDAP groups.

    Right now it seems as you only have the default configuration in there.

    You can either specify one specific group using the full Distiinguished Name of the group or use wildcards, e.g. Sales*
    During the user login the SMC server will verify which configuration will apply. The server will verify if the first entry applies to the user and if not, check the next one until one group matches.

    Regarding the comapny device issue, it would be good to get additional information.
    You have the possibility to create them manually (see chapter 15 of the admin guide) or import a list of devices using a CSV file. Please have a look at our KBA 120539 for additional information on the import.

    I hope this helps.

    Best regards

    Stefan

    :54929
Children
No Data
Unfiltered HTML