Corporate Credential Submissions

[Josh990]

Hi All,

I have a question about Corporate Credential Submissions functionality, specifically when using Domain Credential Filter.

To confirm, does this method use the full AD UPN and password to match?

E.g - Let's say my logon name is 'josh.test' and full UPN is 'josh.test@test.com'.

Would Domain Credential Filter match both of these with a valid password entry or only the UPN?

I've had a look through the PA documentation and Reaper's PA guide but haven't come across a conclusive answer yet.

Thanks

[Chacko42]

Hi @Josh990.,

credential detection will detect the password hash of the user, which is currently identified via userid.

So the username or login-details doesn't matter, as long as the corporate password is used - in that case, the firewall will interfere and block the session (if configured in urlf).