EX SSLVPN: How to configure SSO for File share shortcuts on Workplace

03/26/2020 6 11539

DESCRIPTION:
EX SSLVPN: How to configure SSO for File share shortcuts on Workplace

RESOLUTION:

Question:

What are the required configuration to achieve Single Sign-On for Workplace based File share shortcuts?

Details:

The authentication for File Shares is handled by Workplace with the currently logged in User credentials restored from the main Policyserver. The following configuration is usually required (might vary according to the backend server environment) to achieve Single Sign-On for File share shortcuts:

a. Authentication Server - Advanced - Domain Authentication Forwarding - Domain Name



b. System Configuration - Network Settings - Name Resolution - Windows Networking - Windows Domain Name



For AD Tree environments, configure "Windows Domain Name" may not be sufficient as child domains may not accept this value. We need to configure UPN (UserPrincipalName) to authenticate users, so that the Policyserver will formware the Domainname accordingly to workplace. Or We can use ActiveDirectory Advanced (AD Tree) authentication so that the policyserver forward the user specific Domain name to workplace for Single Sing-On.

For further details, please contact SonicWall Support with a packet capture data between the Aventail Appliance and the Fileshare resource.