Admin Center: configure SSO with a gateway configuration

Introduction

In this tutorial, we will see how to configure the SSO on the Admin Center when it is installed as a gateway.

Installation as a gateway consists of installing the Admin Center on a Windows 2016 or 2019 server which is dedicated to administration.

Without the configuration of a constrained Kerberos delegation, the message is not possible to connect using the Use my account for this connection option and an alert message is displayed.

Admin Center Kerberos Error Message

Configuring a constrained Kerberos delegation for SSO

The configuration is done in PowerShell from a domain controller.

To authorize a server:

To authorize several servers, use the script below to modify the $ServerWAC variable by specifying the Admin Center server and enter the servers where SSO must be configured in the $Servers variable which is an array.

Validate the configuration

Also from the command prompt PowerShell, enter the following command by adapting the command to the server being tested:

The PrincipalsAllowedToDelegateToAccount property should display the CN of the Admin Center server and TrustedForDelegation should be true.



Related Posts


Install and use the Admin Center on Windows 10

Presentation In this tutorial, we will see how to install the Admin Center on a computer running Windows 10. The Admin Center is the new name of the Honolulu Project that allows the administration of

Admin Center: installation in gateway mode

SummaryIntroPrerequisitesAdmin Center InstallationUse the Admin CenterAdd a server in the Admin CenterAdd an extensionConclusion Intro In this tutorial, we will see how to install the Admin Center in

Admin Center: Create a Virtual Machine on a Hyper-V Host

Introduction In this tutorial, we will have how to create a virtual machine with the Admin Center interface on a Hyper-V host. Prerequisites: Admin Center installed Hyper-V server Server added in the