Forum Discussion

Anonymous's avatar
Anonymous
Apr 29, 2018

Authentication single sign on

Hi Does anyone know how to get WAC not to prompt for new credentials, and to use credentials that you are signed in with? The documentation on single sign on only covers 2012 Domain Controllers, an...
meipo x's avatar
meipo x
Copper Contributor
May 04, 2018

Hi Darren,

 

At present, the windows admin center only support Windows Server 2012 or 2012 R2 (with Windows Management Framework 5.1) and later version.

Here is a link for reference ( Pay attention to "Are there any other dependencies or prerequisites?" and "Are there any plans for Windows Admin Center to manage Windows Server 2008 R2 or earlier?"parts ):

https://docs.microsoft.com/en-us/windows-server/manage/windows-admin-center/understand/faq


In addtion, we could get the information that we need the server 202 and later version domain controller for the SSO from the link as you posted here.
"(Be aware that this requires a domain controller running Windows Server 2012 or later)."

 

Best regards,


Meipo Xu.

Anonymous's avatar
Anonymous
May 04, 2018

Hi Meipo

I'm only managing 2012 r2 and above, so I'm meeting requirements.

 

It's the Single Sign On with constrained delegation with a 2008 DC I'm trying to get working, not manage a 2008 DC.

The documentation only covers 2012 servers, but you can do constrained delegation  with 2008 domain controllers.  I've set this up, but unable to get WAC to use it.

 

 

 

  • meipo x's avatar
    meipo x
    Copper Contributor
    May 04, 2018

    Hi Darren,


    According to the explanation of that article, the prerequisite for configuring sso is server 2012DC.

    "(Be aware that this requires a domain controller running Windows Server 2012 or later)."

    I made more research on this and test on this in my own environment. I found the "set-adcomputer" option is only available for Server 2012.

    https://technet.microsoft.com/es-es/library/hh852268(v=wps.620).aspx

     

    So I am curious to know how did you configure the constrained delegation with 2008 domain controllers?

     

    Best regards,
    Meipo Xu.

    • Anonymous's avatar
      Anonymous
      May 08, 2018

      We use an application called SquaredUp to visualize our SCOM data.  That server requires constrained delegation. They have an article on it.  That's probably the easiest thing to link to, rather than re-writing it. 

       

      https://tickets.squaredup.com/support/solutions/articles/208270-how-to-set-up-single-sign-on-using-kerberos-constrained-delegation

       

      Does that help? 

      Thanks

      Darren

       

      • meipo x's avatar
        meipo x
        Copper Contributor
        May 08, 2018

        Hi Darren,

        As far as I know, SSO for different products is different.

        The link you have posted is for SCOM. So I am afraid it is not applicable to Window admin center.

        According to official article, we need Server 2012 DC to configure SSO for Windows Admin Center.

        Anyway, we could submit a feedback to the following site.
        https://windowsserver.uservoice.com/forums/295071/category/319162

        Best regards,
        Meipo Xu.

Resources