Remote SSO Help

[Guesty]

I work for a large NHS Hospital and we have a huge amount of people working from home which has put massive loads on our Pulse appliances, so we have built a Apache Guacamole server to put behind the pulse login.

We have been trying to enable Remote SSO for Apache Guacamole but all I seem to get is the login screen of Guacamole whatever I do.

I tried to find the the absolute url to POST but have not been able to so far.

If you manually specify the Guacamole url as http://severort/Guacamlole/#/?username=user&password=password it will log a user in but we cannot get it going through Pulse.

I have also tried NTLM.

Has anybody successfully set this up?

[[email protected]]

@Guesty,

http://server.port/Guacamlole/#/?username=user&password=password, is this the direct login method that works internally when accessing the Guacd?

Does it work if you create a web bookmark on the Pulse using the above links with the static user&pass parameter values? Gaucd creds are same as the Pulse VPN login creds?

[Guesty]

Thanks Ray,

I tried to set up as suggested but it seems to be addding username and passoword twice and doesnt log in.

I think maybe the Remote SSO option would be best but am having no luck with it either.

[[email protected]]

I would need to look at the direct and VPN access Fiddler logs (HTTPS decrypted, non-cached) to understand the flow and suggest you a next action plan.

Reference: https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB40981/?kA1f1000000bmmA