SSO client vs STAS

Hi Pawel,

I do not believe that the SSO client is a suitable solution for a medium to large network. I would use the SSO client for exceptions e.g. non-domain machines. I recently migrated from UTM 9 to XG17.1 and while I initially experienced a number of issues with STAS, I managed to resolve these together with the assistance of Sophos support. STAS is far from perfect but it's the best tool for SSO for XG.

Check out these KBs:

https://community.sophos.com/kb/en-us/123156

https://community.sophos.com/kb/en-us/123154

Hi Pawel,

I do not believe that the SSO client is a suitable solution for a medium to large network. I would use the SSO client for exceptions e.g. non-domain machines. I recently migrated from UTM 9 to XG17.1 and while I initially experienced a number of issues with STAS, I managed to resolve these together with the assistance of Sophos support. STAS is far from perfect but it's the best tool for SSO for XG.

Check out these KBs:

https://community.sophos.com/kb/en-us/123156

https://community.sophos.com/kb/en-us/123154

HI Envercpt,

Did You encounter following issues and did You managed to solve it:

- on computers there are services which are running under domain accounts => in those case almost whole traffic is tagged as comming from "service user" not actual user [SOLVED - there is setting in STAS for that]

- when user is working on his PC, sometimes admin creates remote session to fix something and requests elevated privilages using domain account - in such cases STAS starts to see admin as user working from PC

- I do see lots of logout and then imeddiate logins - any reason why STAS may be doing it?

Pawel

Hi Pawel,

None of our domain workstations have services running under Domain Admins. Only servers. We have also created an AD group called Local Admins which gives a few designated users local administrative rights on their workstations.

I have noticed strange behavior with remote desktops - will check again on Monday and revert.

Enver