Layer 7 Access Management

Tech Tip : CA Single Sign-On : chrome IWA

  • 1.  Tech Tip : CA Single Sign-On : chrome IWA

    Posted 09-18-2018 09:48 AM

    Issue:

     

    We are upgrading siteminder to 12.7 for TIP customer. While Enabled IWA (Windows Autehntication. With Google Chrome the IWA Windows
    authentication is not working as expected.

     

    Environment

     

    Policy server 12.7SP0CR00 on windows 2012;
    Access Gateway Server 12.7SP0CR00 on Windows 2012;

     

    Resolution:

     

    You have to configure Google Chrome with those parameters :

     

    auth-server-whitelist
    auth-negotiate-delegatewhitelist
    auth-schemes

     

    In order to test the settings, you can launch the browser by the command line

     

    c:\> start /B chrome --disable-plugins --process-per-site -auth-server-whitelist="myserver1.mydomain.com, myserver2.mydomain.com, myserver3.mydomain.com,
    myserver4.mydomain.com" -auth-negotiate-delegatewhitelist="myserver1.mydomain.com, myserver2.mydomain.com, myserver3.mydomain.com, myserver4.mydomain.com"
    -auth-schemes="digest,ntlm,negotiate" http://myserver1.mydomain.com/mysite/index.htm

     

     

    KB : KB000110055