Hey,

We're using RD Web Access on 2008 R2. We've got the Web.Config file set to Windows authentication (for integrated) so internal, domain-joined clients can get to the web page without having to log in. We then publish the RDWeb Access web site through TMG 2010, using FBA with Kerberos/Negotiate (NTLM), and have set the required SPNs on the RDWeb Access server.

The internal FQDN of the RDWeb Access server is RDS-01.corp.domainname.com but the public facing FQDN is remote.domainname.com.

How do I get SSO working in this scenario, as users are having to log in to TMG, then again when launching the first RemoteApp application or using the Remote Desktop tab.

Thanks

Hi,

This might be helpful for you:

http://technet.microsoft.com/en-us/library/cc742808.aspx

/Johan

Hi,

Thank you for your post in Windows Server Forum.

In addition to Johan, also refer below article for detailed information.

Introducing Web Single Sign-On for RemoteApp and Desktop Connections
http://blogs.msdn.com/b/rds/archive/2009/08/11/introducing-web-single-sign-on-for-remoteapp-and-desktop-connections.aspx

Hope it helps!

Thanks,
Dharmesh