SSL VPN
Reply
Visitor
KCMFGI
Posts: 4
Registered: ‎03-04-2013
0
Accepted Solution

SSO for VPN-SSL login

Hello,

 

My environment:

- Computer members of Windows 2003 Active Directory domain

- Users log on these computers with their Active Directory username/password

- Users (using IE or FireFox) log on SA (v7.1) web pagewith the same AD username/password

 

I'd like to know if it's possible for my dear users to be automatically loged on the SA web page without re-entenring their credentials (same as Windows, I repeate).

 

Hope you understand and it's possible...

 

Thanks all.

Moderator Moderator
Moderator
SVK
Posts: 193
Registered: ‎08-22-2011
0

Re: SSO for VPN-SSL login

Hi,

 

If I understand correctly, you would like to do a sso to SSL VPN homepage(from browser).

 

If the above understanding is correct then this is not possible.

 

However, if the main intention is L3 connectivity you can enable gina/credential provider for network connect/junos pulse.

 

Regards,

Visitor
KCMFGI
Posts: 4
Registered: ‎03-04-2013
0

Re: SSO for VPN-SSL login

"SSO to SSL VPN homepage(from browser) is not possible" !

This is a bad news, I hope ths functionnality will be added soon...

 

We don't use NC ou Pulse, so GINA is not possible for us.

 

Thanks for this quick answere.

Contributor
Lilja
Posts: 88
Registered: ‎12-02-2009
0

Re: SSO for VPN-SSL login

With certificate based authentication you can achieve "no-interaction" logon...

---------------------------------------------------
Please mark this post as 'accepted solution' if my input answers your question!
A kudo would be nice if you think I deserve it.
---------------------------------------------------
2 A/P clustered 6500, 7.4R9.1
2 A/P clustered 2500, 8.0R3.1 LAB
Visitor
KCMFGI
Posts: 4
Registered: ‎03-04-2013
0

Re: SSO for VPN-SSL login

Thanks for this answer, this is a good idea.

 

Unfortunaly, we don't use certificates and don't have a PKI.

We are a small business.

Moderator Moderator
Moderator
SVK
Posts: 193
Registered: ‎08-22-2011
0

Re: SSO for VPN-SSL login

You can promote one of your windows server as a CA authority and issue certificate from this sever to users .

 

Regards,

Visitor
KCMFGI
Posts: 4
Registered: ‎03-04-2013
0

Re: SSO for VPN-SSL login

Okay, I will test it in a lab.

 

Concerning the SSO to SSL VPN homepage(from browser), do you think it could be possible if I make a custom page ?

Moderator Moderator
Moderator
SVK
Posts: 193
Registered: ‎08-22-2011
0

Re: SSO for VPN-SSL login

With the custom page option we may have to use javascript.

I am not a programmer  however, using the script we will be able to pull the username but not the password.

I dont think this will work with browser and operating system secuiryt enhancements.

 

Regards,

Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.