jksnbco
Enthusiast
Enthusiast

Horizon Client - Access Denied after implementing MFA on UAG

We recently implemented MFA in UAG via SAML authentication with Azure AD.

We have two UAG3.8 servers set up.  We are using round robin DNS. 

Randomly, we get an 'access denied' error from the horizon client when trying to connect remotely. 

'Access denied' Steps

1. Launch VMware horizon Client

connection 1.PNG

2. Login with credentials in client.

3. Web browser opens, prompting to open VMware Horizon 32 bit client.  User clicks open. 

loading horizon client.PNG

4. Access denied error occurs

access denied horizon client.PNG

We have tried connecting to each UAG to see if one UAG is having an issue, but the behavior randomly occurs on each UAG. 

When it works, step 4 does not occur.  The user is prompted again for credentials, then presented with their desktop options.  the problem has not occurred prior to implementing MFA. 

Issue has occurred don Horizon client 5.4.2 and 5.4.3

VMware horizon view version 7.11

An SR has been created for this, but wanted to see if anyone else has run into this problem.

4 Replies
jksnbco
Enthusiast
Enthusiast

We have also tried setting Edge Chromium, Chrome, and Internet Explorer 11 as the default browser.  Behavior still randomly occurs. 

0 Kudos
EricMonjoin
VMware Employee
VMware Employee

Are you sure you don't have any issue with your load balancer between UAG and Horizon (sessions persistance) or in front of UAG ?

Did you check logs in your Connection servers ?

0 Kudos
bjohn
Enthusiast
Enthusiast

Just curious, why would get an option to open the 32-bit horizon client when you are already launching the horizon client?

0 Kudos
chsa_topsoe
Contributor
Contributor

Did someone manage to find solution?

I am in this exact same situation of random "Access Denied" by Horizon Client only. The HTML connection doesn't give this issue.

I have both UAG's at 3.10 along with Horizon 7.13. Tried with client 2006 and 2012.

What did VMware conclude in their SR?

Best regards.

0 Kudos