Installation
Admin UI
Automation
API
CLI
Users
Main Site
strongDM Docs
Change mode
Change mode
Architecture & Glossary
Deployment
CPU Monitoring
Datasources
Environment Variables
Gateways
Log Retention
Ports Guide
Relays
Security-Enhanced Linux
Servers
Configure Vault to Use the strongDM HTTP Proxy
strongDM Desktop
Websites
Authorization
Access to Resources
Permission Level
Roles
Secret Stores Reference
Service Accounts
Temporary Access
Users
Authentication
SCIM API Spec
SCIM Groups
Create Group
Delete Group
Get Group
List Groups
Replace Group
Update Group
SCIM Users
Create User
Delete User
Get User
List Users
Replace User
Update User
Platform Security
Authentication & Identity Federation
Credential & Secrets Management
Data Protection
Log Management
Pervasive Auditing
Installation
Quick Start Guide with AWS
Install Your Gateway
EC2 Gateways
ECS Fargate Gateway Deployment Guide
Azure VM Gateways
Docker Gateways
GCP Gateways
Kubernetes Gateways
Linux Gateways
Nomad Gateways
strongDM Gateway AMI Installation Guide
Uninstall Linux-Based Gateways and Relays
Configure Logging
Logging Scenario - Send Local Logs to CloudWatch
Logging Scenario - Send Local Logs to S3
Logging Scenario - Send Local Logs to Filebeat
Logging Scenario - Send Local Logs to Graylog
Logging Scenario - Logging with Rsyslog
Logging Scenario - Send Local Logs to a Splunk Indexer
Configure Single-Sign-On (SSO)
SSO With Ping Identity (SAML)
SSO With ADFS
SSO With Auth0
SSO With Azure AD
SSO With Google
SSO With Keycloak
SSO With Okta
SSO With SAML
SSO With VMware Workspace ONE
SSO With OneLogin (OIDC)
SSO With OneLogin (SAML)
Configure Secret Store Integrations
AWS Secrets Manager
Azure Key Vault
GCP Secret Manager
HashiCorp Vault
Cyberark Conjur
Admin UI
Review Logs
Logging Overview
View Activities
View Datasource Queries
View SSH Replays
View RDP Replays
View Kubernetes Replays
View Web Logs
Access
Create Admin Tokens
Access Rules
Users
Roles
Service Accounts
Generate API Keys
Infrastructure Management
Datasources
Add a Datasource
Amazon DocumentDB
Amazon Elasticsearch
Amazon MQ
Amazon Neptune
Athena
Aurora MySQL
Aurora PostgreSQL
Azure PostgreSQL
BigQuery
Cassandra
Citus
Clustrix
CockroachDB
Db2 LUW
Db2i
Druid
DynamoDB
ElastiCache Redis
Elasticsearch
Greenplum
Maria
Memcached
MemSQL
Microsoft SQL Server
MongoDB (Replica Set)
MongoDB (Single Host)
MySQL
PostgreSQL
Presto
RabbitMQ
Redis
Redshift
SingleStore
Snowflake
Sybase ASE
Sybase IQ
Teradata
Oracle
Servers
Add a TCP Connection
Add an RDP Server
Add an SSH Server With Certificate Auth
Add an SSH Server with a Customer-Managed Key
Add an SSH Server With a Public Key
Clusters
Add an EKS Cluster
Add an AKS Cluster
Add a Google Kubernetes Engine Cluster
Add a Kubernetes Cluster
User Impersonation Mode for Kubernetes
Websites
Clouds
Configure AWS Cloud
Configure Azure Cloud
Configure GCP Cloud
Network
Gateways
Relays
Secret Store Integration Settings
Settings
Azure User & Group Provisioning
JumpCloud User & Group Provisioning
Okta User & Group Provisioning
Authentication
Set up MFA with Duo
Passwords
General SSO Guide
Timeouts
OneLogin User & Group Provisioning
Ports
Port Overrides
SSH
SSH Certificate Auth
SSH Port Forwarding
Log Encryption and Storage
Log Encryption and Storage
Gateway Log Encryption
Log Locally to Gateways
Remote Log Encryption
Use strongDM Logs
Automation
Getting Started
Filters
Tags
Containers
Add strongDM Client Containers in Kubernetes
Introduction to strongDM and Containers
Gateways and Relays in Docker Containers
Run the strongDM Client on Docker
Configuration Management Tools
Ansible with SDM
Deploy HA Gateways with Cloudformation
AWS Registration and Cleanup
Create a Self-Registering Relay with Chef
Use Chef Knife with SDM
Quick Start strongDM with Terraform
Terraform
Importing
Import Datasources
Import Roles
Import Users
Auditing
Audit Queries
Audit SSH
Audit Activities
Temporary Access Integrations
Grant Temporary Access with a Hubot Chatbot
Automate Temporary Access with PagerDuty Schedules
Rotate Passwords
Code Garden
Monitoring and Observability
Gateways and Relays
API Reference
Overview
CLI Command Reference
sdm admin
clusters
add
clone
delete
list
update
datasources
add
clone
delete
list
update
kubernetes
add
clone
delete
list
update
ports
enforce
list
reset
set
rdp
add
clone
delete
list
update
relays
create
create-gateway
delete
list
rename
remote-identities
create
delete
groups
list
update
roles
add
attach
delete
detach
grant
grant-all
list
revoke
revoke-all
update
secretstores
create
delete
healthcheck
list
status
update
servers
add
clone
delete
list
update
services
add
assign
delete
grant
grant-all
list
revoke
revoke-all
rotate
suspend
unassign
unassign-all
update
ssh
add
clone
delete
list
rotate-ca
update
view-ca
users
add
assign
delete
grant
grant-all
grant-temporary
list
reinstate
revoke
revoke-all
suspend
unassign
unassign-all
update
sdm audit
activities
cloud
datasources
kubernetes
permissions
queries
rdp
relays
ssh
tokens
users
web
sdm connect
sdm crypto
parse-log
sdm disconnect
sdm doctor
sdm help
sdm kubernetes
dump
play
split
update-config
sdm lock
sdm login
sdm logout
sdm profile
sdm ready
sdm relay
create
create-gateway
sdm ssh
alias
dump
play
pubkey
split
config
sdm status
sdm terraform
sdm unlock
User Guide
CLI Tour
GUI Tour
Client Installation
Linux Installation Guide
macOS Installation Guide
Windows Installation Guide
strongDM Binary Verification
Client Authentication
Service Accounts on macOS and Linux
Service Accounts on Windows
Connect to Resources
Datasources
Oracle
Kubernetes
RDP Resources
SSH Servers
Websites
Troubleshooting FAQ
Getting Help
Updates
Release Notes
August 2022
July 2022
June 2022
May 2022
April 2022
March 2022
February 2022
January 2022
December 2021
November 2021
October 2021
September 2021
August 2021
July 2021
June 2021
May 2021
April 2021
March 2021
February 2021
January 2021
December 2020
November 2020
October 2020
September 2020
August 2020
Archive
Access Rules/Multi-Role Beta
System Status
Home
User Guide
Last modified on August 10, 2022
Top