Skip to main content

June 20, 2025

Commands for Managing Authenticators

Authenticators are created when you configure SAML authentication between Omnissa Access or Omnissa Unified Access Gateway (UAG) and an Omnissa Horizon Connection Server. The only management task is to enable or disable True SSO for the authenticator.

For readability, the options shown in the following table do not represent the complete command you would enter. Only the options specific to the particular task are included. For example, one row shows the --list --authenticator options, but the vdmUtil command you would actually enter also contains options for authentication and for specifying that you are configuring True SSO:

vdmUtil --authAs admin-role-user --authDomain netbios-name --authPassword admin-user-password --truesso --list --authenticator

For more information about the authentication options, see Command-line Reference for Configuring True SSO.

vdmutil truesso Command Options for Managing Authenticators
Command and OptionsDescription
--list --authenticator [--verbose]Lists the fully qualified domain names (FQDNs) of all SAML authenticators found in the domain. For each one, specifies whether True SSO is enabled. If you use the --verbose option, the FQDNs of the associated connection servers are also listed.
--list --authenticator --name labelFor the specified authenticator, lists whether True SSO is enabled, and lists the FQDNs of the associated connection servers. For label use one of the names listed when you use the --authenticator option without the --name option.
--edit --authenticator --name label --truessoMode mode-valueFor the specified authenticator, sets the True SSO mode to the value you specify, where mode-value can be one of the following values:
  • ENABLED. True SSO is used only when the Active Directory credentials of the user is not available.
  • ALWAYS. True SSO is always used even if vIDM has the AD credentials of the user.
  • DISABLED. True SSO is disabled.
For label use one of the names listed when you use the --authenticator option without the --name option.

Was this page helpful?

Provide feedback for this topic

Was this topic helpful?

Please do not include any personal or confidential information.

Generating link…