Hi folks,
I appreciate a lot any help to my issues with RD web access externally through RD gateway. I have searched quite a lot but do not seem to find suggestions that could solve my problem.
My setup is a very simple one server (domain member of an internal domain) installed with all the RD services rolls (RD web access, RD gateway, RD session host, no RD session broker). The server has internal domain name and IP. A fire wall is setup at the edge of internal domain, which only pass through port 443. The fire wall captures an external FQDN with fixed IP and passthrough https request to the RD server in the internal domain.
The RD server (RD web access, RD gateway, RD session host) uses a self-generated certificate to sign everything (RD gateway certificate, Remote Apps, RD session host). the certificate is issued to the external FQDN, which is publicly accessible/routable/registered DNS name/IP.
Now I have installed this particular certificate also on my client pc under trusted root certification authority. I have no problem to connect to https://FQDN/RDWeb, being asked the RDWeb credential (internal domain admin credential). the Remote Apps list properly. If I click an App, I am asked the credential of RD gateway server. with my internal domain admin credential, I have no problem to launch RemoteApps.
My issue is: how can I make single sign on to work. I read at microsoft guide stated that single sign on only works for client and server joined to the same domain. is this the case?
Please advice. What I have missed, or what I could do to make SSO work?
Thanks a lot.