Gateway v3.42.0 introduces No Credentials Auth Mode for Background Actions. By default, background actions — File Transfer, Remote Command, and System Tools — require the end user to enter the end user's OS Credentials before proceeding. This feature lets administrators allow trusted end users to skip the OS Credentials (OSC) prompt when performing background actions on an unattended computer — without lowering security for everyone else.
With this feature enabled, a user can skip the OSC prompt for background actions when either of the following is true:
- The user is an SSO user
- The user's current session has Two-Factor Authentication (2FA) verified
Local users and AD users/group members without 2FA enabled will continue to be required to enter OS Credentials as usual.
2. Scope and Requirements
2.1 Supported Version
- Gateway version: v3.42.0 or later
- Endpoint version: v3.8.4.7 or later
2.2 License requirement
This feature is controlled by a license entitlement, since it changes a security-related default. Please contact your Splashtop sales representative to have this feature enabled for your team before continuing. Until it's enabled, the Require OS Credential for Background Actions setting won't appear in Endpoint Policies or Deployment, and background actions will continue to always require OS Credentials.
3. Enabling in a Deployment Package
Use this method to apply the setting when you are creating a deployment package.
- Go to Management/Deployment, then create a new deployment package or clone an existing one.
- Scroll to the Security section, below Request permission to connect.
- Find the Require OS Credential for Background Actions checkbox — it's enabled by default.
- Uncheck it to allow eligible end users (SSO users, or users with 2FA verified) to skip the OSC prompt.
- Save the deployment package.
4. Enabling in an Endpoint Policy
Use this method to apply the setting to computers that are already deployed by assigning or editing an Endpoint Policy.
- Go to Management/Endpoint Policies, then create a new policy or edit an existing one.
- Find the Require OS Credential for Background Actions checkbox — it's enabled by default.
- Uncheck it to allow eligible end users to skip the OSC prompt for computers under this policy.
- Save the policy and assign it to the relevant computers or groups.
5. A few things worth knowing
- This setting covers File Transfer, Remote Command, and System Tools (Task Manager, Registry Editor, Service Manager, Device Manager). It has no impact on the authentication flow for remote sessions.
- If either the On-Prem app (Windows or Mac) or the On-Prem Streamer is on a version below what's listed in Section 2, OS Credentials will always be required, regardless of how this setting is configured.