Hi,
I have an all-in-one RD server with all roles installed and domain-joined. I have followed every article, forum post and topic I can find relating to SSO but it's not working for me. I only have a need to get SSO working externally from non-domain joined
Windows computers.
The current issue is...when visiting london.domain.co.uk user sees the login web page, and enters their login (in email address format) and current password. Remote App page then loads, showing all the application icons. User clicks an icon. First box to
pop up is "make sure you trust the publisher...", user clicks 'Connect'. The next box is a login box asking for username and password, the message on the box is "Enter your credentials. These credentials will be used to connect to ts1.domain.co.uk".
On attempting the above from another computer, I get a slightly different message "The credentials that were used to connect to ts1.domain.co.uk did not work. Please enter new credentials." Also shows "The logon attempt failed".
If I manually enter my username and password the app loads as expected. I want to avoid this 2nd login.
When I click "Remote Desktop Web Access Configuration" and login, on the configuration tab, I have set
One or more RemoteApp sources = selected
source name: ts1.domain.co.uk
internal FQDN: ts1.domain.co.uk
external FQDN: london.domain.co.uk
I have GoDaddy certificate for london.domain.co.uk, which is bound in IIS to Default Web Site\RDWeb. The same certificate is also installed in Certificates\Local Computer\Trusted Root Certification Authorities
IIS authentication settings are
Default web site = anonymous authentication is enabled, all other disabled
Default web site\RDweb = anonymous authentication is enabled, all others disabled
Default web site\Rpc = Basic authentication + Windows authentication is enabled, all others disabled
RD Session Host Configuration settings are
"General" tab
Security layer = SSL (TLS 1.0)
NLA = enabled
Certificiate = london.domain.co.uk
"Log on Settings" tab
Use client-provided log on information
RemoteApp Manager settings are
"RD Session Host Server" tab
server name: london.domain.co.uk
"RD Gateway" tab
Do not use an RD Gateway
"Digital Signature" tab
sign with a digital signature = ticked (cert used is london.domain.co.uk)
"Custom RDP Settings" tab
authentication level:i:0
enablecredsspsupport:i:1
I have the computer account in the local TS Web Access Computers Group.
Where am I going wrong?