cancel
Showing results for 
Search instead for 
Did you mean: 

Login Agent Service Account Blue Prism Role

nighiltom
Level 3
Hi ,

Can I know which BP role I should assign Service ACcount created for login agent ,When using single sign-on, the Login Agent service will need to be configured to start with a service account that has
appropriate access to Blue Prism.

------------------------------
Nighil Tom
Senior Analyst
DOE
Australia/Sydney
------------------------------
Nighil Tom Senior Analyst, Automation | NSW Department of Education | nighil.tom@det.nsw.edu.au | education.nsw.gov.au
1 BEST ANSWER

Helpful Answers

andrew.beard
Staff
Staff
Hi Nighil,

According to the V6.5 User Guide - Login Agent - https://portal.blueprism.com/documents/v65-user-guide-login-agent

What account context should the Login Agent services use?
  • Login Agent server service - It is recommended that a domain user account is used - this is the context that Login Agent Runtime Resources will use. Additionally, if the Runtime Resource is configured to authenticate against the environment through the use of /sso startup parameter, it is this context that will be used to authenticate the Runtime Resource against the Blue Prism environment.
  • l Login Agent SAS service - A service account with local admin rights is required.

Additionally you need is a domain account configured to run the Login Agent Windows service, and that the domain account is mapped to the Runtime Resources role, through direct mapping or AD Security Group. Once done, include the SSO startup parameter in Login Agent configuration file.

Hope this helps.

Kind regards
Andrew

------------------------------
Andrew Beard
Senior Consultant
Blue Prism
Australia/Melbourne
------------------------------

View answer in original post

2 REPLIES 2

andrew.beard
Staff
Staff
Hi Nighil,

According to the V6.5 User Guide - Login Agent - https://portal.blueprism.com/documents/v65-user-guide-login-agent

What account context should the Login Agent services use?
  • Login Agent server service - It is recommended that a domain user account is used - this is the context that Login Agent Runtime Resources will use. Additionally, if the Runtime Resource is configured to authenticate against the environment through the use of /sso startup parameter, it is this context that will be used to authenticate the Runtime Resource against the Blue Prism environment.
  • l Login Agent SAS service - A service account with local admin rights is required.

Additionally you need is a domain account configured to run the Login Agent Windows service, and that the domain account is mapped to the Runtime Resources role, through direct mapping or AD Security Group. Once done, include the SSO startup parameter in Login Agent configuration file.

Hope this helps.

Kind regards
Andrew

------------------------------
Andrew Beard
Senior Consultant
Blue Prism
Australia/Melbourne
------------------------------

Thanks Andrew for the details .

------------------------------
Nighil Tom
Senior Analyst
DOE
Australia/Sydney
------------------------------
Nighil Tom Senior Analyst, Automation | NSW Department of Education | nighil.tom@det.nsw.edu.au | education.nsw.gov.au