Setup Bridge on the Admin Console

Configuration of the Admin Console

1. Before installing the executable on the server, the Admin console will need to be prepared to register the Keeper Bridge. The bridge cannot be registered to the Root Node (top level) of the organization tree structure, therefore a sub node will need to be created in order to register the bridge.

A Keeper Bridge service account is required in order to authenticate against the Keeper Cloud. To perform this function you will need to setup a dedicated Keeper Admin account in the Admin Console. This account must have administrative access to the Bridge node and at least the permissions to manage nodes, users, roles, teams and Bridge/SSO objects. Make sure to enable "Cascade Node Permissions".

To finalize the account setup and validate the account operation, from the Bridge hosted server login to the Admin Console with that new Bridge service account. For your two-factor code duration setting chose "Don't ask again on this device". Navigate to Settings - Security from the top right login icon and enable "Stay Logged In". Log out and log in again. Reload your browser and verify that you are being logged back in without a password or 2-factor code required. You now have successfully completed the Bridge Admin account setup.

2. To create a new node underneath the Root Node click on the three dots and select the '+ Add Node' button.

3. Type in the name of the node and select create.

4. Select the node created in Step 3 above.

5. Select the Provisioning tab and select the + Add Method button.

6. Select the Active Directory or LDAP Sync radio button, then select the Next button.

7. Leave the LAN and WAN IP Address fields blank. The registration process of the bridge will automatically link to the admin console. Select the Save button.

8. The Keeper Bridge executable is now displayed and can be downloaded from the Provisioning tab and staged on the computer that the bridge will be installed on.

Note: For Active Directory, the Keeper Bridge application will need to be installed on a domain joined member server located on the same network as a domain controller. Ensure your domain joined member server is NOT a domain controller as this is not a supported setup of the Keeper Bridge application.