v11: RDP Access via BIG-IP APM - Part 1

I wrote an article several months back on auto-launching Remote Desktop sessions with APM.  With the introduction of BIG-IP APM v11, there is a new built-in capability to support a full webtop.  This...
Published Sep 13, 2011
Version 1.0
BIG-IP Access Policy Manager (APM)
events
news
security
tech tip
daboochmeister's avatar
daboochmeister
Icon for Cirrus rankCirrus
Oct 24, 2014
Jason, we use RSA servers as RADIUS AAAs, and users access via a fob (or soft token). In this setup, our users login with their RSA credentials (a PIN they setup, and the currently-displayed random number on their fob/token), then click on the RDP icon - after which they have to enter domain credentials. In this configuration, is it possible to set auto-login to log them into the RDP server? I'm ok with hard-coding the domain, but using RSA as the AAA server, the user's domain userid/password aren't in the session, correct? I'm guessing that we'd either have to configure the RDP server to also use the RSA device for authentication, or configure the portal to use AD for authentication, the way you show above. But maybe i'm wrong - is there any way to auto-login given the session variables in play after an RSA-based portal authentication? thx!