Set Up SAP IQ Authentication

Each SAP IQ record identifies account login credentials, database information and target hosts (IPs) for authenticating to SAP IQ instances.

This record type is only available in accounts with PC or SCA and is only supported for compliance scans.

Which technologies are supported?

For the most current list of supported authentication technologies and the versions that have been certified for VM and PC by record type, please refer to the following article:

Authentication Technologies Matrix

Help me with record settings

How do I get started?How do I get started?

- Go to Scans > Authentication.

- Check that you already have a record defined for each host running database instances.

- Create a SAP IQ record for the database instance. Go to New > Databases > SAP IQ.

What login credentials are required?What login credentials are required?

Provide basic login credentials (username and password) to be used for authentication or get the password from a supported password vault.

Tell us the database name to authenticate to and the port the database is running on. The installation directory name is required only for Unix based hosts.

When to enable password encryption?When to enable password encryption?

Enable this option when your SAP IQ database instance requires an encrypted password for successful login. If password encryption is required and you do not enable this option then authentication will fail.

Which IPs should I add to my record?Which IPs should I add to my record?

Select the target compliance hosts (IPs) to authenticate to.

Want to access the account password from your password vault?Want to access the account password from your password vault?

We support integration with multiple third party password vaults. Just go to Scans > Authentication > New > Authentication Vaults and tell us about your vault system. Then choose Authentication Vault in your record and select your vault record that you created. At scan time, we'll authenticate to hosts using the account name in your record and the password we find in your vault.

Important Notes for Unit ManagersImportant Notes for Unit Managers

When a Unit Manager edits a record, the Unit Manager only sees the IPs in the record that they have permission to. Any changes made by the Unit Manager to the record settings will apply to all hosts defined in the record, regardless of whether all hosts belong to the user's business unit. The record may contain more IPs that are not visible to the Unit Manager.