topic Re: AnyConnect - RDP session 2 times login credential in Network Access Control

AnyConnect - RDP session 2 times login credential

Looi Siew Key — Wed, 03 May 2017 09:44:49 GMT

Hi All,

We facing issue which require to input 2 times credential during perform RDP session.

First login will be prompt box during RDP establish, Second login will appear inside windows login page.

Before dot1x configured in switchport, RDP credential only happen on first login, second login will pass through without double input.

Any idea of this issue to avoid double input credential needed after deploy dot1x in switchport?

Re: AnyConnect - RDP session 2 times login credential

howon — Wed, 03 May 2017 17:51:28 GMT

Can you provide screenshots both each of the prompts? Also can you share client supplicant settings?

Re: AnyConnect - RDP session 2 times login credential

Looi Siew Key — Fri, 07 Jul 2017 09:12:38 GMT

Hi, please find attached file for both login screen.

I did some testing, found out that RDP double login happen once AnyConnect NAM (Network Access Manager module) is installed, whenever NAM is not installed but running dot1x/mab with windows supplicant RDP only single login require. Once NAM installed but without running dot1x/mab it will have double login.

I tried to configure in NAM using SSO (Single Sign On) but still fail, it will prompt double login while RDP.

Found out 1 related bug in cisco database. Bug ID : CSCup30284.

But it seems not similar AnyConnect version, i am using 4.3.1095 and 4.3.2039, but are failed.

Alternate way which we can uninstall NAM, use only ISE Posture module in AnyConnect. Use Windows supplicant to replace NAM it can work, only single login require in RDP.

Please advise.

First login

Second login

Re: AnyConnect - RDP session 2 times login credential

hslai — Wed, 12 Jul 2017 19:31:34 GMT

Thanks for providing the bug ID. You have probably received the same response from your account team.

After checking with our AnyConnect escalation, we learned that this is a known Microsoft issue:

RDC and Custom Credential Providers – Windows SDK Support Team Blog