Hi, I'm trying to set up sso in my lab with the following configuration:
- rdbr01.rds.local - rd connection broker;
- rdsh01.rds.local - rd session host;
- rdswa01.rds.local - rd web access;
- rdg01.rds.local - rd gateway;
Every server is Windows Server 2012.
Plus I have 2 client machines - Windows 8 Pro and Windows 7 SP1.
I did all those things: default creds delegation for termsrv/*, changes in web.config.
Now it works great, but without rd gateway - user has no need to enter his login/password anywhere except for initial logon.
BUT! As soon as I enable RD gateway with these settings:
Clients start to act quite different. I can still get to web interface without additional authentication, but as I try to start an application I get this:
Note, that rdbr01.rds.local (RD connection broker) asks for authentication, not RD Gateway.
So what can go wrong? Where to start diggin'?
Is there some kind of RDS login process description chart, like for Citrix XenApp?
P.S. I know that Smart Card SSO with RD Web Access is not possible, but is there a way to avoid entering pin code for the second time each time I start published application with a shortcut?