Download BeyondTrust

To generate a unique B Series Appliance key, and then, from a non-restricted system, submit that key to BeyondTrust's update server. Download any available updates to a removable storage device and then transfer those updates to a system from which you can manage your B Series Appliance.After downloading a software package, browse to the file from the Manual Installation section, and then click the Update Software button to complete the installation.ℹ️NotePlease be prepared to install software updates directly after download. Once an update has been downloaded, it will no longer appear in your list of available updates. Should you need to redownload a software update, contact BeyondTrust Technical Support.When the BeyondTrust End User License Agreement (EULA) screen appears, fill out the required contact information and click the Agree-Begin Download button to accept the EULA and continue the installation. If you have multiple B Series Appliances with the same site configuration (either for failover or for ATLAS) you will only need to accept the EULA once.Note that if you chose to decline the EULA, an error message displays and you will not be able to update your BeyondTrust software.If you have any issues updating after accepting the EULA, please contact BeyondTrust Technical Support .During the installation process, the Updates page will display a progress bar to notify you of the overall update progress. Updates made here will automatically update all sites and licenses on your BeyondTrust Appliance B Series.If you are installing a software update, logged-in representatives will temporarily lose connections

The Assertion Consumer Service URL in Remote Support to SP Single Sign On URL in Beyond Identity.Copy the Entity ID in Remote Support to SP Audience URI in Beyond Identity.In Beyond Identity, configure Attribute Statements. Groups includes a RS group to be assigned via the SAML assertion.In Beyond Identity, click Save Changes.In the SAML Connections panel, locate the connection just added.For the new connection:Click the Download Certificate icon.Click the Download Metadata icon .Return to the browser tab for the /login interface of the BeyondTrust Remote Support instance.In the Remote Support /login interface:Click Upload Identity Provider Metadata and locate the file on your device.Click Upload Certificate (or Replace Certificate, if required), and locate the file on your device.Scroll down and expand the User Attribute Settings.Configure based on the attribute names configured in Beyond Identity.Scroll down and expand Authorization Settings.Configure as required. A Default Group Policy must be selected.Click Save.Select Public Portals on the left menu, and then the Public Sites tab.Click Add. In the BeyondTrust instance, click Public Portals, and then Public Sites.Enter the site information, and check the Require SAML Authentication box.Click Save.Log out of BeyondTrust Remote Support.When using the URL for your public sites, SAML authentication occurs via Beyond Identity.For assistance, contact BeyondTrust Technical Support.Updated 21 days ago Table of ContentsDownload the Beyond Identity appConfigure Beyond Identity for representativesTest Beyond Identity on your deviceConfigure Beyond Identity for public portals or sites

The login page for Remote Support, click Use SAML Authentication.A screen shows the Beyond Identity app verifying Identity.After successful verification, you are authenticated in Remote Support.Configure Beyond Identity for public portals or sitesIf Beyond Identify is already open in a browser tab, open a new browser tab for BeyondTrust Remote Support.Go to the /login interface of the Remote Support instance.Click Users & Security on the left menu, and then click the Security Providers tab.Click Add and select SAML for Public Portals.Scroll down and expand the Service Provider Settings.Locate the Assertion Consumer Service URL and the Entity ID. These are required for Beyond Identity. Alternately, click Download Service Provider Metadata.If Beyond Identity is not already open, open it in a new browser tab.Click Integrations in the left menu.Click the SAML tab.Click Add SAML Connection.If you have downloaded the service provider metadata, click Upload XML and locate the file on your device.If you have not downloaded the information, then:Copy the Assertion Consumer Service URL in Remote Support to SP Single Sign On URL in Beyond Identity.Copy the Entity ID in Remote Support to SP Audience URI in Beyond Identity.In Beyond Identity, configure Attribute Statements. Groups includes a RS group to be assigned via the SAML assertion.In Beyond Identity, click Save Changes.In the SAML Connections panel, locate the connection just added.For the new connection:Click the Download Certificate icon.Click the Download Metadata icon </>.Return to the browser tab for the /login interface of the BeyondTrust Remote Support instance.In the Remote Support /login interface:Click Upload Identity Provider Metadata and locate the file on your device.Click Upload Certificate (or Replace Certificate, if required), and locate the file on your device.Scroll down and expand the User Attribute Settings.Configure based on the attribute names configured in Beyond Identity.Scroll down and expand Authorization Settings.Configure as required. A Default Group Policy must be selected.Click Save.Select Public Portals on the left menu, and then the Public Sites tab.Click Add. In the BeyondTrust instance, click Public Portals, and then Public Sites.Enter the site information, and check the Require SAML Authentication box.Click Save.Log out of BeyondTrust Remote Support.When using the URL for your public sites, SAML authentication occurs via Beyond Identity.For assistance, contact BeyondTrust Technical Support." data-testid="RDMD">Using Beyond Identity with SAML for Remote Support provides several benefits: Provides strong, unphishable multi-factor access and policy-based access controls to ensure high-trust authentication for admin accounts.Ensures only devices that meet the company’s security policy have access to admin accounts.Establishes identity before privileged actions on an endpoint are allowed, using a frictionless step-up authentication.Creates a zero-trust PAM architecture: the system doesn’t trust the user until they pass a high-assurance authentication and doesn’t trust their device unless it meets security policies.Eliminates passwords and the corresponding vulnerabilities from privileged accounts.Beyond Identity can validate a device’s security posture before allowing access to Remote Support.Beyond Identity can provide insights into access activity.To use the Beyond Identity app, you must download and install the application, and configure it and BeyondTrust Remote Support to work together. The integration is configured using POST, not

Redirect. The integration can be used to authenticate SAML for representatives and public sites.Go to the Beyond Identity Download site.Download and install the Beyond Identity app, and then use the app to authenticate your instance of Beyond Identity.Follow the steps below to download and configure the Beyond Identity app for a representative.If Beyond Identify is already open in a browser tab, open a new browser tab for BeyondTrust Remote Support.Go to the /login interface of the Remote Support instance.Click Users & Security on the left menu, and then click the Security Providers tab.Click Add and select SAML for Representatives.Scroll down and expand the Service Provider Settings.Locate the Assertion Consumer Service URL and the Entity ID. These are required for Beyond Identity. Alternately, click Download Service Provider Metadata.If Beyond Identity is not already open, open it in a new browser tab.Click Integrations in the left menu.Click the SAML tab.Click Add SAML Connection.If you have downloaded the service provider metadata, click Upload XML and locate the file on your device.If you have not downloaded the information, then:Copy the Assertion Consumer Service URL in Remote Support to SP Single Sign On URL in Beyond Identity.Copy the Entity ID in Remote Support to SP Audience URI in Beyond Identity.In Beyond Identity, configure Attribute Statements. Groups includes a RS group to be assigned via the SAML assertion.In Beyond Identity, click Save Changes.In the SAML Connections panel, locate the connection just added.For the new connection:Click the Download Certificate icon.Click the Download Metadata icon .Return to the browser tab for the /login interface of the BeyondTrust Remote Support instance.In the Remote Support /login interface:Click Upload Identity Provider Metadata and locate the file on your device.Click Upload Certificate (or Replace Certificate, if required), and locate the file on your device.Scroll down and expand the User Attribute Settings.Configure based on the attribute names configured in Beyond Identity.Scroll down and expand Authorization Settings.Configure as required. A Default Group Policy must be selected.Click Save.Log out of BeyondTrust Remote Support.To test Single Sign-On using SAML with the Beyond Identity app, ensure you are logged out of all instances of BeyondTrust Remote Support.On the login page for Remote Support, click Use SAML Authentication.A screen shows the Beyond Identity app verifying Identity.After successful verification, you are authenticated in Remote Support.If Beyond Identify is already open in a browser tab, open a new browser tab for BeyondTrust Remote Support.Go to the /login interface of the Remote Support instance.Click Users & Security on the left menu, and then click the Security Providers tab.Click Add and select SAML for Public Portals.Scroll down and expand the Service Provider Settings.Locate the Assertion Consumer Service URL and the Entity ID. These are required for Beyond Identity. Alternately, click Download Service Provider Metadata.If Beyond Identity is not already open, open it in a new browser tab.Click Integrations in the left menu.Click the SAML tab.Click Add SAML Connection.If you have downloaded the service provider metadata, click Upload XML and locate the file on your device.If you have not downloaded the information, then:Copy