Any experience with Always On VPN before Windows L...
# citrix-netscalerk
Kari Ruissalo (WyW)
08/01/2024, 11:38 AMAny experience with Always On VPN before Windows Logon for user-tunnel establishment with sth other than LDAP, like Entra ID? We've had great experience with Entra ID with the normal VPN as the authentication method (SAML), but the documentation discusses about "AD credentials" (https://docs.netscaler.com/en-us/netscaler-gateway/13-1/vpn-user-config/always-on-vpn-before-windows-logon#understanding-alway[…]efore-windows-logon).
I would assume it should work? We're seeing the shift towards FIDO2/Passwordless and being able to support these mechanisms is vital for modern environments.
m
Mike Streetz (O_P)
08/05/2024, 9:25 PMI’ve done it with certificates
Mike Streetz (O_P)
08/05/2024, 9:29 PMwhen it asks for the user credential though, that’s a local windows credential, so it’s not like you can swap that out
Mike Streetz (O_P)
08/05/2024, 9:36 PMwould be interesting if you could set up an nfactor flow that had SAML in there instead of just straight ldap
k
Kari Ruissalo (WyW)
08/06/2024, 7:40 AMCertificates for the user tunnel? Instead of LDAP? With Windows Hello?