This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

AD SSO and Basic User Authentication in one network

Hi,

I'm migrating a customers network from Standard Proxy with Basic User Authentication to Active Directory with SSO.

Thanks to Bob's howto in the knowledgebase it was easy to get AD SSO to work, but I struggle to get both methods working during the migration process.

I made two proxy-profiles: StandardProxyUsers and ADUsers.

But depending which profile is first, this one is working and no fallback to the other.

When I put ADUsers-profile first the standard user are promted for authentication but because the user is not known to the AD database, they are blocked and prompted endless.

When I put the StandardProxyUsers-profile first, they can authenticate, but the AD users are blocked.

I could not find a way to point ADusers to profile 1 und StandardUsers to profile 2, such as a fallback if it's not an ADUser goto profile Standard.

This thread was automatically locked due to age.

0 BAlfson over 12 years ago

Hi, Walter,

For a given subnet, you can have one Profile in Standard mode and one in Transparent mode. You can't have two in Standard, and I don't know of a way to overcome that.

How about creating a temporary AD account "Gast" with password "Gast" and then giving that to everyone?

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel
0 wk_03 over 12 years ago in reply to BAlfson

Thank you Bob,

this is a workaround, that may help for a migration in a small company.
For larger migration projects it would be nice to have an profile1 OR profile2 possibility.
Cancel
Vote Up 0 Vote Down

Cancel
0 PeterRL over 11 years ago in reply to wk_03

Hi wk,

i´m facing exactly the same issue.
Did you found a way to resolve this?
Cancel
Vote Up 0 Vote Down

Cancel
0 BAlfson over 11 years ago

The only workaround would be to have the "Default contact filter action" be the 'Fallback action' and configure the 'URL Filtering' tab instead of another Profile.

Cheers - Bob
Cancel
Vote Up 0 Vote Down

Cancel