topic Re: Clientless VPN (Web) and SSO credentials in General Topics

Clientless VPN (Web) and SSO credentials

Indorama_Ventures — Fri, 08 Mar 2019 08:25:18 GMT

Dear Palo Alto Experts,

We have set-up a Clientless VPN webpage for certain users so that they can connect to an internal website from outside the company.

When they logon to the VPN portal, with their Windows Credentials (Radius authenticaton), they are shown a couple of icons for internal webpages.

One webpage uses Windows authentication to logon.

My ultimate goal is to have this Single Sign On but right now I would be happy if it just works in the different browsers.

In Google Chrome for example I am prompted with credentials. This is also the case in IE11. While in Microsoft Edge I am directly presented with an Accesed Denied page.

What can I do so that users are either prompted for credentials or automatically logged on based on the credentials they entered during log on on the Web-Portal?

Any thoughts are more than welcome.

Remko

Re: Clientless VPN (Web) and SSO credentials

BPry — Fri, 08 Mar 2019 21:48:13 GMT

@Indorama_Ventures ,

Out of curiosity, if you put the site into the intranet app container in edge does it present the credential prompt?

Re: Clientless VPN (Web) and SSO credentials

Indorama_Ventures — Tue, 12 Mar 2019 12:22:02 GMT

Interresting proposal.

Do I understand correctly that you mean this ?

https://searchenterprisedesktop.techtarget.com/answer/How-can-IT-put-Windows-10-containers-to-use

First of all I need to familiarize myself on the topic. I have not worked with this at all. Secondly these systems are outside our organization so we do not have any control of these.

I am just trying to understand how this whole single sign on works and why it works differently for each browser.

Easiest is to put a notification on the webpage that it works best with a particular browser but I guess with every IT problem we would like to know what is causing this.

Remko