wsam & sso

[futuretec_]

hi

can we integrate wsam with sso,

e.g: i enabled wsam for the customers to access my e-banking solution,yet i have another authentication server which they need to authenticate to another server to have access to specific application.

can it be achieved throu wsam ?

[muttbarker_ · Accepted solution]

SSO is designed for integration into access to web pages, terminal services sessions and email. You said WSAM so I am guessing that you are talking about simply provding access to the application through WSAM and that the app is launched from the user desktop.

SSO will not work in that instance.

[futuretec_]

what if these applications were web-based

[Mrkool_]

if it is web based application than you can send them through Juniper to begin with.

any way you launch WSAM and it listens for a particular PORT or IP address on your computer. So any time any application running on your computer tries to access that specific IP or port it will be trasmitted through the WSAM tunnel to the SSL VPN. Any application that is launched independently of the Juniper SSL VPN page will not be able to utilize the SSO abilities of Juniper.

[muttbarker_]

As MrKool said in his message - if it is web based then it plays right into what the SSL box does. Just define a profile and within a profile you can define an SSO autopolicy. This can then be bookmarked for the user to launch. But you can't do it from WSAM.

You have a lot of flexibility in how you define your SSO for web based apps - I would recommend taking a look at it.

[futuretec_]

let me give you the scenario,

i have a web-based applications i tried to access them thro core access it didnt work with me for some reasons so i decided to go with wsam, i configured wsam source application as iexplore.exe and the destination servers are my portal site which hosts the applications, now what if i added the secondary ldap server as allowed destination in the wsam would that make it work ?

or again its only supported on core access only ?

[muttbarker_]

SSO only works through core - If a key objective is to utilize SSO then I would go back to your original scenario of running the app under core and doing some troubleshooting on why it won't run that way.