Hi Wayne, I«m not 100% sure, but I think you get the new credentials to the client pc only, if this pc logs-in to the Domain, otherwise the client still uses the cached credentials. Greetings Moreilly ... View more

Hi, just one thought: could it be, that in one case, the Domain is part of the username which is send to the backend system (e.g. "domain\user") and in the other case, the username only is used ? e.g. the IVE variables <USER> ("domain\user") or <USERNAME> ("user") are used. Moreilly ... View more

Hi, may be a "Custom Expressions" Role Mapping is the solution (I think the advanced license is needed for that) With a "Custom Expressions" Role Mapping the "NOT" logical operator is available, so if your are not a member of a group you«ll get a specific role ... View more

Hi ej, the logout URL for the IVE is https://<ive-host>/dana-na/auth/logout.cgi so you have to somehow get the OWA Logout Button to direct to this link (may be after the OWA session itself is closed ?), see also KB8696 May be that helps ... View more

one further note: you can use a wildcard certificate, e.g. for *.company.com, in this case one certificate for office.company.com remote.company.com would be sufficient (means, that the domain name has to be the same) ... View more

Hi hazeen, if you do NAT, yes you have to use an additional (official) IP The problem is, that the SA (as any device I know) has to make a mapping between the certificate and an IP address, e.g if there is a connection to the IP "A", just use the Certificate "A", if there is a connection to IP "B", just use the Certificate "B". The SA can not use the hostname of the request (https://host_A/...) as a differentiator as the hostname is known to the SA only after the SSL session is established (and the right certificate is already necessary during that setup) Cheers ... View more

I made the same experience with the Citrix Terminal Service to be used within the SVW. It works if any Citrix Client is already installed (ActiveX Client, Neigborhood Client etc.). So it«s possible to start the Citrix Client within the SVW but it was/is not possible to install the Citrix Client in case no Citrix Client is already installed. TAC confirmed that limitation/feature. That is a huge limitiation in my opinion ... View more