Enterprise Vault.cloud™ Archive Administration Help
- Getting started with Archive Administration
- Archive Overview
- My Config
- About the My Config page
- About Services
- Selecting the User Management options
- Configuring Office 365 Sync
- Creating a custom role group for the Office 365 Sync account
- About Office 365 mailbox delegation permissions synchronization
- About Provisioning
- About Office 365 synchronizations
- Running and scheduling Office 365 synchronization events
- Office 365 Sync reporting
- Viewing the Office 365 Sync summary and reports
- CloudLink Sync Summary
- About Managed Tags
- About Account Management
- Searching for archive accounts
- Using search filters
- Creating an archive account
- Viewing the details of an archive account
- About the Account Details page
- Editing an archive account
- Deleting an archive account
- Deploying users
- Removing user access
- Enabling services for existing archive accounts
- Editing Mobile Web Access permission for existing archive accounts
- Unlocking an archive account
- Exporting archive account information
- Archive Collectors
- About Archive Collectors
- About Box File Archiving
- Setting up the link to Box
- Removing the link to Box
- Enabling file collection automatically when the service maps an account
- Enabling unmapped user reporting
- Adding to the list of file extensions that are archived from Box
- Changing the file extensions to archive for individual users
- Enabling or disabling file collection manually for mapped users
- Downloading a Box user list
- About Salesforce Chatter Archiving
- About Lync On-Premises Archiving
- About Bloomberg Archiving
- Role Management
- Policy Management
- Classification
- Import Data
- Authentication Management
- Configuring the Enterprise Vault.cloud authentication service
- Enabling the Authentication Settings permission for the Policy Manager role
- Assigning the Policy Manager role to an administrator
- Selecting an authentication method
- Uploading a token-signing certificate
- Validating the Identity Provider URL
- Activating single sign-on
- AD FS Configuration Guide
- Retention Management
- About Retention Management
- Configuring the default retention period
- Creating a retention policy
- Editing a retention policy
- Deleting a retention policy
- Associating a retention policy with a policy target
- Disassociating a retention policy from a policy target
- Enabling and disabling the storage expiry setting
- Viewing the storage expiry status table
- Continuity Management
- About Email Continuity
- Email Continuity prerequisites
- Configuring Email Continuity
- Provisioning the Email Continuity service for your mail servers
- Adding the Email Continuity IP ranges to your firewall and mail server whitelists
- Updating your email security provider routing configuration
- Testing the Email Continuity configuration
- Managing Email Continuity
- Email Continuity FAQ
- Reporting and Notifications
- About Enterprise Vault.cloud reports and logs
- Viewing the Activity Log
- Viewing the Message Log
- Viewing the Usage Log
- Viewing the Usage Reports
- Creating a Retention Log Report
- Viewing the Mobile Browser Log
- Viewing the Personal Browser Log
- Viewing the Discovery Browser Log
- Creating a Messaging Report
- Creating a Personal Archive Report
- Creating a Mobile Web Access Report
- Creating a Discovery Archive Report
- Usage notifications
- Enabling or disabling usage notifications
- Changing the usage notification threshold and frequency
- Adding email addresses for usage notifications
- Removing email addresses from usage notifications
- Personal.cloud Deployment for IBM Notes
- Archive Administration Updates in Previous Releases
- About the updates for previous releases
- March 2017 updates
- August 2016 updates
- May 2016 updates
- January 2016 updates
- December 2015 updates
- November 2015 updates
- August 2015 updates
- May 2015 updates
- February 2015 updates
- November 2014 updates
- August 2014 updates
- May 2014 updates
- November 2013 updates
- July 2013 updates
- May 2013 updates
- February/March 2013 updates
- November 2012 updates
- May 2012 updates
- March 2012 updates
- January/February 2012 updates
- January 2012 updates
- Archive Administration Known Issues
Adding a relying party trust for Enterprise Vault.cloud
The first step to configure your AD FS environment is to add a relying party trust for Enterprise Vault.cloud.
Note:
We recommend that you do not change the Index Value of the Endpoint from its default value. Changing the Index Value of the Endpoint can prevent the Enterprise Vault.cloud authentication service from working properly with your AD FS environment.
To add a relying party trust for Enterprise Vault.cloud
- Access the AD FS Management console.
- In the left pane of the AD FS Management console, expand Trust Relationships, right-click Relying Party Trusts, and then click Add Relying Party Trust.
- In the Welcome panel of the Add Relying Party Trust Wizard, click Start.
- In the Select Data Source panel, select Enter data about the relying party manually, and then click Next.
- In the Specify Display Name panel, enter Cloud Archive in the Display Name field, and then click Next.
- In the Choose Profile panel, select a profile, and then click Next.
- In the Configure Certificate panel, click Next to skip this optional step.
Note:
We recommend that you do not configure a certificate. Configuring a certificate prevents the Enterprise Vault.cloud authentication service from working properly with your AD FS environment.
- In the Configure URL panel, select Enable support for the SAML 2.0 WebSSO protocol.
- In the Configure URL panel, enter the Entity ID from the Your Trust Information section on the Authentication Management page of Archive Administration in the Relying party SAML 2.0 SSO service URL field, and then click Next.
Note:
The Entity ID varies based on the location of your organization. If you cannot find the Entity ID for your organization, contact Veritas Services & Support.
- In the Configure Identifiers panel, enter the Entity ID again in the Relying party trust identifier field, click Add to add the identifier, and then click Next.
- For AD FS 3.0 only, in the Configure Multi-factor Authentication Now? panel, select I do not want to configure multi-factor authentication settings for this relying party trust at this time, and then click Next.
- In the Choose Issuance Authorization Rules panel, select Permit all users to access this relying party, and then click Next.
- In the Ready to Add Trust panel, review the configured settings, and then click Next.
- In the Finish panel, select Open the Edit Claim Rules dialog for this relying party trust when the wizard closes, and then click Close.
- In the Edit Claim Rules for Cloud Archive window, click Add Rule.
- In the Select Rule Template panel of the Add Transform Claim Rule Wizard, select Send LDAP Attributes as Claims in the Claim rule template field, and then click Next.
- In the Configure Rule panel, enter Send Claims to Cloud Archive in the Claim rule name section.
- In the Configure Rule panel, select Active Directory in the Attribute store section.
- In the Configure Rule panel, select the following sets of LDAP attributes and outgoing claim types in the Mapping of LDAP attributes to outgoing claim types section.
LDAP attribute
Outgoing claim type
E-Mail-Addresses
E-Mail Address
Given-Name
Given Name
Surname
Surname
- In the Configure Rule panel, click Finish to close the Add Transform Claim Rule Wizard.
- In the Edit Claim Rules for Cloud Archive window, click OK to close the window.
- In the AD FS Management Console, select Cloud Archive in the Relying Party Trusts pane.
- In the Cloud Archive section of the Actions pane, click Properties.
- In the Cloud Archive Properties window, select the Advanced tab.
- In the Secure hash algorithm field, select one of the following algorithms:
SHA-1
SHA-256
Note:
We recommend that you select the SHA-1 algorithm.
- Click OK to close the Cloud Archive Properties window.