SLChamberlin
Mar 06, 2019Nimbostratus
Kerberos auth for Microsoft Remote Desktop Services ??
Client has v13 APM frontend to Microsoft RDS Web Access on Windows 2016. Currently using APM policy with AD Auth and SSO. They want to move to SAML (APM SP, Ping IdP) in place of AD Auth. That breaks the SSO as APM no longer captures the password. Was hoping to use delegated Kerberos SSO but it is not a selection option for RDS. There is a "Standalone Client Settings" with "Kerberos SSO Configuration" option. Selecting a Kerberos SSO configuration there does not seem to do anything. Looking at APM logs set to debug, there are no Kerberos entries for the session. Am I missing something? Does it only apply to Session Host? Or is Kerberos to RDS not supported period?