topic Re: Mobile Access with SSO for HTTP Apps in SASE and Remote Access

Mobile Access with SSO for HTTP Apps

MtxMan — Mon, 13 Jun 2022 09:53:12 GMT

Hi Check Mates,

Is it possible to enable Mobile Access Blades on Quantum Gateway for Client-less VPN with SSO enabled?

I have LDAP that integrated with Quantum GW, and wanna enable MOB Access. So if user access client-less vpn and login using LDAP Account, after successful login when this user access some internal https apps, he dont need to input credential again, because SSO enabled on Access Quantum Gateway and user automatic log in to that apps. Can we achieve that?

Thankyou..

Re: Mobile Access with SSO for HTTP Apps

PhoneBoy — Mon, 13 Jun 2022 15:36:34 GMT

This is supported for some apps.
See: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk35080

Re: Mobile Access with SSO for HTTP Apps

MtxMan — Mon, 13 Jun 2022 16:11:43 GMT

Hi @PhoneBoy

yes actually i read this SK before post question here. But i worried about supported version because only state for R77, is it still applicable for R81?

and also, how about if the application is develop by local software house? is it possible to achieve my goal?

Re: Mobile Access with SSO for HTTP Apps

PhoneBoy — Mon, 13 Jun 2022 16:22:06 GMT

Still applies for R81.
It's difficult to say if this will work for your in-house application.

Re: Mobile Access with SSO for HTTP Apps

MtxMan — Mon, 13 Jun 2022 16:34:35 GMT

well noted!

haha yeah, i think so. this is not firewall job, but how about Harmony? quick check, i think it can be solved with Harmony Connect but i worried about Data Privacy on cloud solution

Re: Mobile Access with SSO for HTTP Apps

Wolfgang — Mon, 13 Jun 2022 19:17:46 GMT

@MtxMan all depends to your internal application. MOB SSO can reuse the login credentials for authentication to your internal App you have to check and play a little bit with the SSO properties. We are using this for Exchange OWA, Citrix Storefront, Dynamics, Intranet WebApplication and some more. Most of them are working fine, except if you use two factor authentication to MOB.

TAC can help if you need to decide the SSO login forms.

Re: Mobile Access with SSO for HTTP Apps

MtxMan — Tue, 14 Jun 2022 00:39:27 GMT

Hi @Wolfgang Thanks for your insight.

I just worried if SSO cant run smoothly on local develops apps. Do you have local apps and running well with SSO?

Re: Mobile Access with SSO for HTTP Apps

Wolfgang — Tue, 14 Jun 2022 06:58:12 GMT

@MtxMan SSO can work with local developed apps. We have this running as an example with Atlassians confluence. Go in discussion with your developers and there requirements for authentication and test and test again. Getting SSO working will be too a process of development. There are a lot of options on the MOB to parse SSO requests and change something or not:

Another option will be to let MOB-portal store the users credentials for the local app. The user has to login once and MOB stores the password. This stored password will be reused everytime the local app will be accessed. Only a password change or if the stored password is deleted the user has to login again.

Re: Mobile Access with SSO for HTTP Apps

MtxMan — Wed, 15 Jun 2022 11:42:34 GMT

Hi @Wolfgang Thank you very much, appreciate your effort and detail explanation. will discussing with developer team to achieve this goal.