Corporate Credential Submissions

Josh990 — Wed, 13 Jan 2021 11:08:13 GMT

Hi All,

I have a question about Corporate Credential Submissions functionality, specifically when using Domain Credential Filter.

To confirm, does this method use the full AD UPN and password to match?

E.g - Let's say my logon name is 'josh.test' and full UPN is 'josh.test@test.com'.

Would Domain Credential Filter match both of these with a valid password entry or only the UPN?

I've had a look through the PA documentation and Reaper's PA guide but haven't come across a conclusive answer yet.

Thanks

Re: Corporate Credential Submissions

Chacko42 — Wed, 31 Mar 2021 14:07:02 GMT

Hi @Josh990.,

credential detection will detect the password hash of the user, which is currently identified via userid.

So the username or login-details doesn't matter, as long as the corporate password is used - in that case, the firewall will interfere and block the session (if configured in urlf).

topic Re: Corporate Credential Submissions in General Topics

Corporate Credential Submissions

Re: Corporate Credential Submissions