Dedicated Link for Guacamole login page available?

[zv...@mailbox.org.INVALID]

Hi there,
i setuped SSO Extension (SAML) for Apache Guacamole with Microsoft 
Active Directory Federation Service (AD FS) successfully. In the 
configuration file i set the parameter "#extension-priority:" to "saml, 
*". So all users are automataticlly redirected to the ADFS logon page - 
perfect.

Is there a dedicated url to get as local admin (guacadmin) to the Apache 
Guacamole Login page? So that the automaticlly redirect not used.

/Daniel

---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@guacamole.apache.org
For additional commands, e-mail: user-help@guacamole.apache.org

Re: Dedicated Link for Guacamole login page available?

[Michael Jumper <mj...@apache.org>]

On Sat, Mar 4, 2023, 6:31 AM <zv...@mailbox.org.invalid> wrote:

> Hi there,
> i setuped SSO Extension (SAML) for Apache Guacamole with Microsoft
> Active Directory Federation Service (AD FS) successfully. In the
> configuration file i set the parameter "#extension-priority:" to "saml,
> *". So all users are automataticlly redirected to the ADFS logon page -
> perfect.
>
> Is there a dedicated url to get as local admin (guacadmin) to the Apache
> Guacamole Login page? So that the automaticlly redirect not used.
>

No - there actually isn't a login page at all. The login dialog that
appears is the UI rendering an authentication challenge presented by the
webapp. When it redirects to the SAML IdP, that's actually the UI rendering
a challenge that requests a SAML response instead of a username and
password.

If you want all users to use SAML, and you want to use an administrative
account, you will need to grant administrative permissions to an account in
SAML or provide a "guacadmin" account in SAML.

- Mike