This topic describes the system settings in Bastionhost, including authentication, data security, users, notifications, assets, network diagnostics, data management, and AI review.
Overview
System settings provide global configuration options for Bastionhost. The settings are organized as follows:
Authentication settings: IDaaS authentication, AD or LDAP authentication, and two-factor authentication
Data security settings: data masking policies, watermarks, and connection security settings
User settings
Notifications
Asset settings: O&M settings and third-party asset sources
Network diagnostics
Data management: storage management, configuration backups, and data archiving
AI review settings (available for Agentic Edition instances and instances with AI O&M audit purchased and enabled)
Authentication settings
Manage IDaaS authentication
Integrate Bastionhost with IDaaS to synchronize users and organizations. User group synchronization and deletion synchronization can also be configured.
Navigation: On the System Settings page, choose Authentication Settings > IDaaS Authentication.
For more information, see Manage IDaaS authentication.
Configure AD or LDAP authentication
Integrate Bastionhost with an AD or LDAP server for centralized authentication.
Navigation: On the System Settings page, choose Authentication Settings > AD/LDAP Authentication.
For more information, see Configure AD or LDAP authentication.
Enable two-factor authentication
Enable two-factor authentication to enhance login security.
Navigation: On the System Settings page, choose Authentication Settings > Two-Factor Authentication.
For more information, see Enable two-factor authentication.
Data security settings
Data masking policies
Configure rules for masking audit data when it is viewed to protect sensitive data.
Navigation: On the System Settings page, choose Data Security Settings > Data Masking Policies.
For more information, see Data masking policies.
Connection security settings
Configure TLS versions and cipher suites to secure connections.
Navigation: On the System Settings page, choose Data Security Settings > Connection Security Settings.
For more information, see TLS security configuration.
Watermark settings
Enable or disable watermarks and configure their style. When enabled, watermarks appear in web-based O&M sessions, real-time monitoring, and playback of historical audit sessions.
Navigation: On the System Settings page, choose Data Security Settings > Watermark Settings.
For more information, see Watermark configuration.
User settings
Configure default settings and behavior for users.
Navigation: On the System Settings page, choose User Settings.
For more information, see User settings.
Notifications
Configure notification methods and rules.
Navigation: On the System Settings page, choose Notifications.
For more information, see Notifications.
Asset settings
O&M settings
Configure default parameters and feature options for O&M.
Navigation: On the System Settings page, choose Asset Settings > O&M Settings.
For more information, see O&M configuration.
Manage third-party asset sources
Configure and manage third-party asset sources.
Navigation: On the System Settings page, choose Asset Settings > Third-Party Asset Source.
For more information, see Manage third-party asset sources.
Network diagnostics
Use network diagnostics to check connectivity.
Navigation: On the System Settings page, choose Network Diagnostics.
For more information, see Diagnose network issues.
Data management
Storage management
Manage storage space in Bastionhost.
Navigation: On the System Settings page, choose Data Management > Storage Management.
For more information, see Storage management.
Configuration backup
Back up and restore Bastionhost configuration data.
Navigation: On the System Settings page, choose Data Management > Configuration Backup File.
For more information, see Configuration backup.
Archive session recordings to OSS
Configure automatic archiving of session recordings and operation logs to Object Storage Service (OSS) for backup.
Navigation: On the System Settings page, choose Data Management > Data Archive.
For more information, see Archive session recordings to OSS.
AI review settings
Enable or disable automatic review on the AI Review Settings page. When automatic review is enabled, Bastionhost uses AI to review O&M sessions within the configured scope.