Symantec Access Management

  • Private Community
Back to discussions
Expand all | Collapse all

Tech Tip : CA Single Sign-On : chrome IWA

  • 1.  Tech Tip : CA Single Sign-On : chrome IWA

    Broadcom Employee
    Posted Sep 18, 2018 09:48 AM

    Issue:

     

    We are upgrading siteminder to 12.7 for TIP customer. While Enabled IWA (Windows Autehntication. With Google Chrome the IWA Windows
    authentication is not working as expected.

     

    Environment: 

     

    Policy server 12.7SP0CR00 on windows 2012;
    Access Gateway Server 12.7SP0CR00 on Windows 2012;

     

    Resolution:

     

    You have to configure Google Chrome with those parameters :

     

    auth-server-whitelist
    auth-negotiate-delegatewhitelist
    auth-schemes

     

    In order to test the settings, you can launch the browser by the command line

     

    c:\> start /B chrome --disable-plugins --process-per-site -auth-server-whitelist="myserver1.mydomain.com, myserver2.mydomain.com, myserver3.mydomain.com,
    myserver4.mydomain.com" -auth-negotiate-delegatewhitelist="myserver1.mydomain.com, myserver2.mydomain.com, myserver3.mydomain.com, myserver4.mydomain.com"
    -auth-schemes="digest,ntlm,negotiate" http://myserver1.mydomain.com/mysite/index.htm

     

     

    KB : KB000110055