SSO for VPN-SSL login

[KCMFGI]

Hello,

My environment:

- Computer members of Windows 2003 Active Directory domain

- Users log on these computers with their Active Directory username/password

- Users (using IE or FireFox) log on SA (v7.1) web pagewith the same AD username/password

I'd like to know if it's possible for my dear users to be automatically loged on the SA web page without re-entenring their credentials (same as Windows, I repeate).

Hope you understand and it's possible...

Thanks all.

[SVK · Accepted solution]

Hi,

If I understand correctly, you would like to do a sso to SSL VPN homepage(from browser).

If the above understanding is correct then this is not possible.

However, if the main intention is L3 connectivity you can enable gina/credential provider for network connect/junos pulse.

Regards,

[KCMFGI]

"SSO to SSL VPN homepage(from browser) is not possible" !

This is a bad news, I hope ths functionnality will be added soon...

We don't use NC ou Pulse, so GINA is not possible for us.

Thanks for this quick answere.

[Lilja]

With certificate based authentication you can achieve "no-interaction" logon...

[KCMFGI]

Thanks for this answer, this is a good idea.

Unfortunaly, we don't use certificates and don't have a PKI.

We are a small business.

[SVK]

You can promote one of your windows server as a CA authority and issue certificate from this sever to users .

Regards,

[KCMFGI]

Okay, I will test it in a lab.

Concerning the SSO to SSL VPN homepage(from browser), do you think it could be possible if I make a custom page ?

[SVK]

With the custom page option we may have to use javascript.

I am not a programmer  however, using the script we will be able to pull the username but not the password.

I dont think this will work with browser and operating system secuiryt enhancements.

Regards,