Your suggested change has been received. Thank you.

Suggest A Change

Thank you! Your suggestion has been submitted.

https://thales.na.market.dpondemand.io/docs/dpod/services/kmo….

There are some errors in your form.

Your Name This field is required

Your Email This field is required

How can we improve this content? This field is required

SAS PCE documentation
- Explore Thales Docs

SAS PCE
Agents
MobilePASS+
SafeNet Access Exchange
API references
- BSIDCA API
- SAS Management API
Integrations
Account management
Release Notes

All

All

Get started

Installation of Enterprise Advance Features

Please Note:

SAS PCE
Get started
- System Requirements
- Installation of SAS PCE
  - Install SafeNet Authentication Service
  - Prepare database
  - Configure SafeNet Authentication Service
  - Configure SafeNet Authentication Service for High Availability
  - Configure for MobilePASS and MobilePASS+ Enrollment
  - Onboarding for MobilePASS+ enrollment
  - SAS PCE Windows Services Startup Recommendations
  - Security and Compliance
- Installation of Enterprise Advance Features
  - SAS PCE Enterprise Virtual Appliance
    - Interactive Configuration Wizard
    - SAS PCE Enterprise Virtual Appliance — High Availability
    - Hardening Guidelines
    - Amazon Web Services (AWS)
    - VMware vSphere
- Upgrade
  - SafeNet Authentication Service pre-upgrade checklist
  - SafeNet Authentication Service upgrade - primary data center
  - SafeNet Authentication Service upgrade - secondary data center
  - SafeNet Authentication Service post-upgrade checklist
  - Additional Considerations
- System setup
  - Setup
  - Communications
  - Logging
Dashboard
- On-Boarding
- Virtual Servers
- Administration
Users and groups
- Configure individual users
- Manage tokens for a user
- Groups
- Containers
- Restrict access based on the time, day, or date
- User Policies
User synchronization
- LDAP sync server settings
- LDAP integration
- LDAP settings
Operators and roles
- Internal operators
- External operators
- Provision roles automatically
- Alerts
Tokens
- Token types
  - Hardware tokens
    - OTP hardware token
    - KT-4 tokens
    - RB-1 tokens
  - Software tokens
    - GrIDsure
    - SMS OTP token
  - Third Party tokens
- Token allocations
- Token templates
- Token restrictions
- Temporary Password Policy
- Token Passcode Processing Policy
- Configure server-side PINs
- Token synchronization
- Import SafeNet tokens
- Token inventory
- Deallocate inventory
- MobilePASS target and Push OTP settings
- SMS credits
- SMS/Email/Voice OTP Delivery Methods
- Quicklog authentication
- Initialize hardware tokens
Provisioning tokens to users
- Provision tokens
- Automate token provisioning
- Provisioning tasks
- Assign a hardware token to a user
- Bulk assign third-party tokens
Push OTP
- Requirements and considerations for Push OTP
- Enable Push OTP and MobilePASS+
- Push OTP Rejection Policy
- Customize Push notifications and alerts
- Configure applications for Push OTP
- Token management and enrollment
- Push OTP authentications
FIDO Authentication
- Install and Configure SafeNet Access Exchange
- Install and Configure FIDO Server
- Install and Configure SAS PCE
- End-to-End Flow
RADIUS integration
- RADIUS third-party token support
- RADIUS attributes for users or groups
- Block RADIUS authentication
Server and agent settings
- Authentication Nodes
- Pre-authentication rules
- Restrict IP range
- Email server settings
- SMS settings
- Voice OTP settings
- Configure a voice provider
- FTP/SFTP/SCP settings
- Time zone offset
- Download an encryption key for agents
- Language
- Migrate SafeNet authentication servers
- Display Device Information
- Download an encryption key for remote services
Self-service site
- Site appearance and default language
- Self-Service Modules
- Self-Enrollment pages
- Configure authorities, OOB enrollment, and policies
- Process requests and view reports
Branding the appearance
- Customize email messages
- Customize SMS messages
- Customize voice OTP messages
Reports
- Billing reports
- Compliance reports
- Inventory reports
- Security policy reports
Troubleshooting
- Authentication errors
- Error codes
Preview
- SafeNet Agent for Windows Logon
  - System requirements
  - Installing, configuring, upgrading, and uninstalling the agent
  - Deploying the agent via Group Policy Object
  - Deploying the agent via Microsoft Intune
  - Deploying the agent via Microsoft Endpoint Configuration Manager
  - Registry settings
  - User choice of authenticator and FIDO authentication
  - Passwordless Windows Logon
    - Passwordless Windows Logon setup
  - Prerequisite configuration: UCA, FIDO, and Passwordless Windows Logon
    - Setting up the authentication service
      - System Requirements
      - Install Authentication Service
        
        Podman
        
        Docker
    - Setting up SAE
    - Configuring the agent file
  - Running the solution
  - Troubleshooting and advanced configurations

SAS PCE documentation
SAS PCE
Get started
Installation of Enterprise Advance Features

Installation of Enterprise Advance Features

This section covers the installation and configuration of the advanced features available with SAS PCE Enterprise.

SAS PCE Enterprise Virtual Appliance — A hardened, pre-integrated Ubuntu image that bundles SafeNet Access Exchange (SAE), the FIDO2 server, and the SAS Management API as pre-loaded Docker images. Distributed as an AWS AMI and a VMware OVA. Configured on first boot through an interactive wizard.

On this page

SafeNet Authentication Service Private Cloud Edition

© Copyright 2019-2026, Thales Group

supportportal.thalesgroup.com Support contacts

Support
- Customer Release Notes
- Customer Support Portal
Legal

© Copyright 2019-2026, Thales Group

supportportal.thalesgroup.com