Several ways to bypass the SSO authentication

10/14/2021 1,194 People found this article helpful 203,497 Views

Download

Print

Share

• LinkedIn
• Twitter
• Facebook
• Email
• Copy URL The link has been copied to clipboard

Description

Sometimes Single Sign On authentication is not necessary for the traffic from some particular users, especially from the non-user devices such as internal proxy web servers and IP phones. This article is to demonstrate the ways to bypass SSO authentication.

Resolution

Resolution for SonicOS 6.5

This release includes significant user interface changes and many new features that are different from the SonicOS 6.2 and earlier firmware. The below resolution is for customers using SonicOS 6.5 firmware.

To bypass SSO authentication, you can follow the ways listed as below:

1. Create a dedicated access rule for the user/IP so that SSO authentication cannot be triggered.

2. To Create an Access rule, Click on Manage  in the top navigation menu
3. Navigate to Rules | Access rules, Select from LAN to  WAN. LAN is selected here because the device that needed to be bypassed from SSO is located in the LAN zone. 

2. Add SSO bypass object under Users | Settings | Click CONFIGURE SSO | Enforcement tab. 

If the client is a windows system, then you can try the methods below to bypass the SSO authentication as well:

3. Add User names used by Windows services under Users | Settings | Click CONFIGURE SSO | SSO Agents tab | General Settings tab.

4. Add Local User under Action | Windows Service Users in SonicWall Directory Connector Configuration Tool(SSO Agent).

Resolution for SonicOS 6.2 and Below

The below resolution is for customers using SonicOS 6.2 and earlier firmware. For firewalls that are generation 6 and newer we suggest to upgrade to the latest general release of SonicOS 6.5 firmware.

To bypass SSO authentication, you can follow the ways listed as below:

1. Create a dedicated access rule for the user/IP so that SSO authentication cannot be triggered.

2. Add SSO bypass object under Users | Settings | Configure SSO | Enforcement tab.

If the client is a windows system, then you can try the methods below to bypass the SSO authentication as well:

3. Add User names used by Windows services under Users | Settings | Configure SSO | SSO Agents tab | General Settings tab.

4. Add Local User under Action | Windows Service Users in SonicWall Directory Connector Configuration Tool(SSO Agent).

Related Articles

• Bandwidth usage and tracking in SonicWall
• How to force an update of the Security Services Signatures from the Firewall GUI
• Configure Guest VLAN in the TZ firewall, for guest users to access Internet only.

Categories

• Firewalls > TZ Series
• Firewalls > SonicWall NSA Series
• Firewalls > SonicWall SuperMassive 9000 Series
• Firewalls > SonicWall SuperMassive E10000 Series