Has anyone come up with a solution for RemoteApp SSO via RD Web Access for non domain joined clients? I get prompted at the Web Access form and then again at the Gateway. SSO from the Gateway to the Session Hosts is working as expected for external clients.
I can cache credentials using credential manager but that is not an ideal solution.
SSO works internally because we have a GPO allowing clients to delegate their credentials to the Gateway but I don't have that luxury on non-domain joined clients.
Details about our environment:
- Public CA issued wildcard cert assigned to all RD roles/servers
- Same internal and external namespace
- F5 used to reverse proxy connections
- Two separate Web Access servers (one for internal and one external)
- One Gateway server that only external users connect via
Having the gateway and web access roles on the same server wouldn't help at all would it? My understanding is that the web access server simply hands the client an .rdp file with instructions on how to connect.