UAG reverse proxy for VIDM

[ggovek]

Hello,

I need help when configuring UAG reverse proxy for VIDM. I have a problem that I can not login in Indetity Manager with Windows users from the Internet, from local network everything works OK.

I have the following configuration:

• VMware Identity Manager  3.2.0.0 Build 8016174:
  • IP: 10.10.11.171
  • FQDN: vidm-ls.domain.com
  • Certificate is wildcard signed by DigiCert
  • Appliance is joined to domain

• Unified Access Gateway 3.2:
  • 2 NIC configuration
  • NIC 1 is for MGMT and backend network (IP: 10.10.11.170)
  • NIC 2 for public network (IP: 10.10.12.170 and create NAT to Public IP 91.10.10.10)
  • I have configured split DNS (internal DNS is idm.domain.com and is pingable from VIDM, public DNS is idm.domain.com and is pingable from internet)
  • Certificate is the same that on VIDM.
  • Reverse proxy setting are the following:

What do I have to set that we will work external access and Windows user login?

[pbjork]

How does your access policies look like on VMware Identity Manager?

[ggovek]

With system domain login works correctly but when I try login with AD domain user account the portal redirect me to local URL.

Login with system domain:

And try login with AD domain user account:

For now is policies set to default setting:

[Odurasler2]

Hi!  Was just checking to see if you have this resolved?

[pbjork]

Looks like you are using legacy mode Authentication (users gets redirected to the connector). You need to use outbound only mode. You activate this by adding the seperate connector to the Built-in Identity Provider and then activate Password (Cloud Deployment). In you access policies you must aslo refer to this Password (Cloud Deployment) authentication method..

[Najtsob]

Any example of this setup or guide how to do it ?

I am looking my setup and there is no obvious way to do this.