VPN Client Single Sign-on to MS AD

BILL BARTLETT · ‎11-17-2003

I would like to create a single sign-on for my users. Currently they authenticate to the VPN and then to individual servers within the domain. I would like to have just one logon. I have a Pix 515 which terminates VPNs from clients using Cisco Client 4.0. I authenticated users through MS IAS (radius) to the MS active directory. After users have logged into the VPN, they then have to logon to each server with a username@domain.com logon. As always, any advise you can give is greatly appreciated.

mostiguy · ‎11-17-2003

Are they connecting from machines that are members of the domain?

BILL BARTLETT · ‎11-17-2003

Some are machines members, some machines are not members, some users are probalby loggin on locally.

jwilder · ‎11-18-2003

The problem here is one of Microsoft not Cisco. Non domain member machines will have to logon at each and every new machine they connect to over the tunnel.

Some of this can be alleviated by having your users connect to an internal web portal.

Report Inappropriate Content · ‎12-09-2003

I was wondering if you came up with a solution to this annoying problem (besides using Cisco's ACS server)?

Thanks for your help.

Thuan