SSO - Unable to authenticate with Single Sign On

[T-Tech]

I can not get SSO to work for windows domain  clients.

A have managed to get it to work local on the ZCentral Connect server using Edge.

But the same do not work on other client or servers.

Tried SAML-Tracer with out lock - HTTP/2.0 401 Unauthorized

Using the guide: https://h20195.www2.hp.com/v2/getpdf.aspx/4AA7-7606ENW.pdf

1. Press Win and type Internet Options.
2. Access the Security tab.
3. Select the Trusted sites zone and click on Sites.
4. Make sure that the domain where the ZCentral Connect Manager service is deployed is being displayed on this list. Example: https://*.mydomain.com  5. Apply the changes and restart your browser.

If you are still having issues, check how the Intranet Authentication is congured in your system:

1. Press Win and type Internet Options.
2. Access the Security tab.
3. Select the Local Intranet zone and click the Custom level... button to open the Security Settings - Local Intranet Zone window. 4. Scroll down to the User Authentication options and select Automatic logon with current user name and password.
5. Apply the changes and restart your browser.

[MrMcDunk]

When you installed ZCentral, what account did you select for the install? MSA account? 

[T-Tech]

Hi

I used a AD Service account, not the MSA account.

[MrMcDunk · Accepted solution]

We had a load of issues with SSO not working when using AD service accounts. SSO would work fine from the host machine however not from the endpoints. No one could figure out why and we must have reinstalled Zcentral 20-30 times.

As soon as we tried an MSA account is worked perfectly.

[T-Tech]

MrMcDunk thanks for sharing - I will try the MSA account.

[T-Tech]

Hi McMcDuck

Using a MSA Account solved the SSO issue. Thanks

Hope this will be added to the troubleshoot paper. I have use a lot of hours trying to solve this.

[MrMcDunk]

Amazing! I lost count of the amount of times I reinstalled Zcentral trying to sort. 

HP, get this added please!

[mnyqvist]

Hi

Have activated MSA but still get the login prompt. Have enabled the server under internet options and so on.