MS365

This is part of a series of post for setting up VMware Horizon authentication using AzureAD. TrueSSO setup We are almost there! So far we have created our sub-CAs, setup certificate templates, installed the enrollment server and configured the SAML authentication. At this point, Connecting to the UAG will redirect the user to Azure to log in and when successfully authenticated redirect the user back to the UAG which will… Read More »VMware Horizon authentication using AzureAD (with multifactor) – Part 5: TrueSSO Setup

This is part of a series of post for setting up VMware Horizon authentication using AzureAD. SAML setup In the next part, we will set up the SAML authentication. This consists of 3 steps: First, we need to create the SAML application on Azure, then we will configure the UAG to use that SAML application for authentication, and finally, we need to configure Horizon to accept that SAML authentication. Azure… Read More »VMware Horizon authentication using AzureAD (with multifactor) – Part 4: SAML Setup

This is part of a series of post for setting up VMware Horizon authentication using AzureAD. Enrollment server(s) Repeat all steps in this part on both enrollment/sub-CA servers! On the enrollment/sub-CA server, open the local machine certificate manager: Right-click the Personal node, choose All Tasks > Request New Certificate Click next on the welcome page. Select “Active Directory Enrollment Policy” and click next Select “Enrollment Agent (computer)” and click Enroll.… Read More »VMware Horizon authentication using AzureAD (with multifactor) – Part 3: Enrollment Servers

This is part of a series of post for setting up VMware Horizon authentication using AzureAD. Certification Template The way TrueSSO works is it is using a certificate issued for the user after a successful SAML authentication and authenticates against AD using a smartcard type logon with that certificate. Those certificates are short-lived certificates, valid for approximately 8 or 12 hours (depending on the user’s average working time). Therefore we… Read More »VMware Horizon authentication using AzureAD (with multifactor) – Part 2: Certification Template

This is part of a series of post for setting up VMware Horizon authentication using AzureAD. Sub-CA(s) First, we are going to set up a subordinate certification authority on our 2 servers. I’m using Windows server 2022, but 2019 or 2016 also works fine. By using a sub-CA, all trueSSO certificate requests are handled by those sub-CAs, reducing the load your the root-CA and we are not dependent on a… Read More »VMware Horizon authentication using AzureAD (with multifactor) – Part 1: Setup sub-CA(s)