Launching the product

This section provides information on the various ways you can access Sectona.

Web console-based login

This section will help you log in to the Sectona PAM web console:

Before you log in to the console
Procedure for login to Sectona Web Access
Browsers supported
Login to Sectona Web Access using multi-factor authentication

Before you log in to the console

Ensure the communication is open to Sectona Web Access from your desktop/laptop.
Make sure you have the Sectona Web Access URL available with you, and you have your User ID created for login.

Procedure for login to Sectona Web Access

Go to your browser. View supported browser types here.
Browse the Sectona Web Access URL.
Enter the Username and Password.
Click on Login. If you have Multi-Factor Authentication enabled, you will be prompted with a QR code to register your mobile phone with the system.

If you have multiple Active Directories configured with the system, use the "username@domain_name" format to log in.

Browsers supported

Any HTML 5 compliant browser will be supported:

Operating System	Browser
Windows	Internet Explorer 11 or later
Windows	Microsoft Edge
Windows	Chrome
Windows	Firefox
Windows	Safari
macOS	Microsoft Edge
macOS	Chrome
macOS	Firefox
macOS	Safari

Login to Sectona Web Access using multi-factor authentication

There are multiple MFA methods available. You will be prompted for the corresponding MFA, depending on your MFA configuration.

Multi-factor authentication type	Description (How to use)
Sectona authentication - OTP	Enter the OTP generated on the Sectona app in the MFA pop-up.
SMS OTP	Enter the OTP sent to the registered mobile number via SMS in the MFA pop-up.
Email OTP	Enter the OTP sent to the registered email address in the MFA pop-up.
Third-party application MFA	Depending on the third-party application configured for dual-factor authentication, you will be prompted to specify OTP (for example, Google authenticator).

After successful login, you will be redirected to your MyAccess page.

Sectona client application login

This section will help you to log in to the Sectona Client application to access any target assets.

Before you log in to Sectona Client
Procedure for logging in through Sectona Client
Login to Sectona Web Access using multi-factor authentication

Before you login into Sectona Client

Ensure the communication is open to Sectona Web Access from your desktop/laptop.
Ensure you have the Sectona Web Access URL and User ID created for login.
Make sure you have downloaded the Sectona client application from Sectona Web Access.
.Net framework version 4.5.2 software is installed.

Procedure for login through Sectona client

Open the Sectona client application.
You will be prompted to enter the Sectona Web Access URL. Enter the URL and click on Connect.
Enter your Username and Password. You will be prompted to enter the OTP if you have MFA configured.

Login to Sectona Client using multi-factor authentication

There are multiple MFA methods available. You will be prompted for the corresponding MFA, depending on your MFA configuration.

Multi-factor authentication type	Description (How to use)
Sectona authentication - OTP	Enter the OTP generated on the Sectona app in the MFA pop-up.
SMS OTP	Enter the OTP sent to the registered mobile number via SMS in the MFA pop-up.
Email OTP	Enter the OTP sent to the registered email address in the MFA pop-up.
Third-party application MFA	Depending on the third-party application configured for dual-factor authentication, you will be prompted to specify OTP (for example, Google authenticator).

After successful login, you can access your entitlements by clicking on the Assets button in the top left corner.

Double-click on any of the servers/devices to take access.

You will see the assets that are mapped to your user ID.

Procedure for login with SAML authentication

Go to your browser. In the address bar, navigate to Sectona URL (contact your Sectona Administrator for the URL).
You will be redirected to the Sectona login page.
Click on the Login with SAML option and select the configured SAML option.
Enter your login credentials and click on Submit. Once the authentication is complete, the user will be directed to the MyAccess page.

Contact the Sectona administrator if the Logon with SAML option is not visible on the login screen.

User-based settings

This section will guide you through the user-based settings as mentioned below:

Self-resetting multi-factor authentication
Resetting the user's password
Updating thick client settings
Updating Sectona Launcher settings
Updating Session Window Title

Self-resetting multi-factor authentication

You can self-reset the MFA on your profile by following the below steps:

Login into Sectona Web Access.
Click on your username in the top right corner and select the Settings option.
Go to Multi-Factor and click the Reset button on the MFA authentication enabled on your profile.
A QR code will be prompted. Scan from your smartphone to re-configure.

The reset MFA option is supported for Sectona App OTP, Google Authenticator, and Microsoft Authenticator.

Resetting the user password

If a user forgets their password, they can reset it by clicking on the Forgot Password option on the Login Page.

Ensure that the User Access Policy has been configured with MFA, such as Sectona App, email OTP, SMS OTP, Google Authenticator, and Microsoft Authenticator. To manage the User Access Policy for MFA, navigate to Policies from the navigation bar. Click the User Access Policy from the sidebar and click the required user access policy. Select the required MFA type and click Update.

To reset your password:

Click on the Forgot Password link on the login page.
Enter the username for the user account whose password you intend to reset.
Enter the OTP as per MFA.
Create a new password in the New Password field and confirm it in the Re-Type Password field.
Click on Change Password to reset the password.
Once the password is successfully changed, you will receive a notification on the same window.

Updating thick client settings

You can update thick client settings by following the below steps:

Login to Sectona. Click on Settings in the user profile.
Click on Launcher Settings.
Under Thick Client Settings, select Access Type from the drop-down list.
Specify the location of the .exe file for the chosen thick client in the Execution Path field.
Click on Update.

Updating Sectona Launcher settings

Login to Sectona. Click on Settings in the user profile.
Click on Launcher Settings.
Under Client Settings, you can change the following:
- RDP Resolution: Click on the Custom Resolution checkbox and update the Height and Width of your RDP session window.
- SSH/Telnet Log File: Click the Active checkbox and specify the path to save logs.
- Session Window Title Format: Click on the Custom checkbox and specify the title format using Content Tag(s).
- Open Browser-Based Session In: This option applies only to browser-based sessions such as RDP Over Browser, SSH Over Browser, etc.
  - Click on the New Tab option to open the browser-based session in a new tab.
  - Click on New Popup Window option to open the browser-based session in a new browser window.
Click on Update.

If you need help, please contact your organization's Sectona PAM administrator.