In order to set up SSO for Microsoft RDS, you'll need to create a credential template and then assign the credential at the connector level or the package level.
Prerequisites
- Application Workspace Agent
- Remote Desktop Protocol (RDP) files that are used for SSO must be signed
- For Application Workspace Agent to successfully initiate RemoteApp or desktop sessions via Microsoft RDS without relying on RDWeb, the target RDS host must be accessible over the public internet.
- When considering the location of apps withing the target RDS host, note that the target RDS host has a one-level folder hierarchy.
To facilitate SSO authentication for a new package imported from the RDS connector we need to create a "Credential" entity in the Application Workspace.
Create a credential template in Application Workspace
- Navigate to Manage > Authentication > Credential Store and click Create.
- In the Create credential window that opens:
- For the Type, select 'Template' and click Next
- In Overview, insert a name and description for your template
- For Credentials, specify a variable username and a variable password for the SSO authentication. Choose whether you want to verify the provided password. Password will be verified when the user enters their credentials.
- Navigate to the package imported from the RDS connector and open it.
- Navigate to Releases > Actions.
Assign the credential
The credential template can be assigned in two ways. At the connector level and all packages that are imported will inherit the credential. Or you can overwrite the connector credential and assign it directly to a package.
At the RDS connector level
In the RDS connector > Settings screen > the Network Credentials field.
At package level
It can be assigned only to actions that support a device context.
- Create a package from the Application Workspace Setup Store manually or import apps through the synchronization method.
- Navigate to Releases > Actions.
- Edit or create a new action that supports a device context.
- In the Advance tab of the action:
- In Context, select Device.
- In Network Credentials, select the credential template you previously created.
Note that in the case of managed packages, existing actions cannot be edited nor deleted. To do so, you must convert the package to unmanaged by clicking on Modify package at the top of the Overview screen.
Further reading
Set up the Remote Desktop web client for your users (Microsoft documentation)
