SAML Authentication without ES or CA

Parallels RAS version 19.4 introduces a new authentication type, "Web + Credentials". This type works the same way as "Web" (SAML), but users are prompted to enter credentials when they launch a published application. 

The authentication type "Web + Credentials" can be used when you need to make use of SAML authentication without certificates.

This type requires the initial configuration of the IdP in the same way as the "Web" type, and a token would be retrieved based on the configured attribute mapped with the existing AD user. However, since certificates would not be used for identification, the end user would be prompted to enter credentials.

Certain authentication types are supported only by some versions of Parallels Client. The ensure your users are able to connect, refer to the following article.

You can set Parallels Client to use the "Web + Credentials" authentication type in one of the following ways:

Using Parallels Client

You can change the authentication type to "Web + Credentials" directly in Parallels Client:

1. Open the connection properties.

2. Change the authentication type to Web + Credentials:

Using Policies

You can configure the use of the "Web + Credentials" authentication type in Parallels RAS policies:

1. Open the Policies category in Parallels RAS Console.

2. Select the Web + Credentials authentication type under Primary Connection.

Using invites

You can invite users to your environment with the "Web + Credentials" authentication type pre-configured:

1. Open the Start category in Parallels RAS Console and click Invite Users.

2. Choose the Web + Credentials authentication type.

Using Parallels RAS Management Portal

You can configure the "Web + Credentials" authentication type in Parallels RAS Management Portal:

1. Open Parallels RAS Management Portal at https://address:20443

2. Open Site Settings > Connection > Authentication and choose the Web + Credentials authentication type.