Forum Discussion

Chris_Denham_13's avatar
Chris_Denham_13
Icon for Nimbostratus rankNimbostratus
Sep 10, 2015

BIG-IP Edge Client - AD auto logon / remember credentials

We're using APM with the BIG-IP edge client app and network access for L3 VPN, works awesome but we'd like to pass the AD credentials automatically.

 

I've configured as per below which I believe should work, and at the least be remembering the credentials but it doesn't. I'm running Windows 10 currently, but tested with the same settings on Windows 8.1:

 

Here is our access policy, we use the custom variable name 'adpassword' to facilitate the use of another variable called 'password' in an alternative policy branch.

 

 

 

Our connectivity profile / BIG-IP Edge Client package settings are as follows:

 

 

 

 

 

Any ideas? :)

 

BIG-IP Access Policy Manager (APM)
deployment
microsoft
security

5 Replies

Sort By
  • kunjan's avatar
    kunjan
    Icon for Nimbostratus rankNimbostratus
    Sep 10, 2015

    You may want to verify the virtual server has been added to the trusted sites under IE settings. If use dns name, add in the DNS name to the trusted sites..

     

  • n0vac_65442's avatar
    n0vac_65442
    Icon for Nimbostratus rankNimbostratus
    Nov 25, 2015

    Virtual Server's FQDN must be in the IE's Trusted Sites zone. Local Intranet zone won't work even though it's less restrictive.

     

    • Daniel_Varela's avatar
      Daniel_Varela
      Icon for Employee rankEmployee
      Sep 08, 2016

      This seems to be correct. I just tested it in my lab and until I added my site to trusted sites it didn't start to work. Please mark this thread as answered.

       

    • Stanislas_Piro2's avatar
      Stanislas_Piro2
      Icon for Cumulonimbus rankCumulonimbus
      Apr 12, 2018

      Hi N0vac and Daniel,

       

      Thank you so much for this answer... It made my day. This behavior is still the same in version 12.1.3.2.

       

      For a customer, We had to change the site from Local Intranet zone to Trusted Sites zone and it allowed me to use Reuse Windows Logon Session option in Connectivity profile.