With the True Single Sign-on (True SSO) feature, after users log in to VMware Identity Manager using a smart card or RSA SecurID or RADIUS authentication, users are not required to enter Active Directory credentials again to use a Linux virtual desktop or a published desktop or application.
If a user authenticates by using Active Directory (AD) credentials, the True SSO feature is not necessary. However, you can configure True SSO to be used even in this case, so that the desktop can support both AD credentials and True SSO.
When connecting to a Linux virtual desktop or a published desktop or application, users can select to use either the native Horizon Client or HTML Access.
True SSO has the following limitations:
- The feature is supported only on desktops with the following distributions: RHEL/CentOS 7, Ubuntu 16.04 and 18.04, and SLED/SLES 12.x SP3.
- For RHEL/CentOS 7 desktops, the feature is supported only with the following join methods: the default join domain tools, Samba, System Security Services Daemon (SSSD), and the Kerberos network authentication protocol.
- Set up and configure True SSO in your Horizon 7 environment. See "Setting up True SSO" in the Horizon 7 Administration document.
- Integrate your desktop with an AD domain, following the procedure for your Linux distribution.
- Configure True SSO on your desktop, following the procedure for your Linux distribution.