ADFS or similar to log into windows via RDP?

Hi folks, I have a question that is turning out to be WAY more difficult to answer than I expected. We have a need to have centralized user management as a Managed Service Provider, that would allow us to log into any of the windows servers, across any of our customers, with the same creds. There are all kinds of hokey user management systems out that that will remotely manage AD but we have a whole bunch of other restrictions that don't allow that (HIPAA PCI BLAH BLAH BLAH). Every single thing I read is related to application logins and websites. We don't have that, although we do have citrix, but that is not the question since we know that is actually possible.

So, the root question. Is it possible to log into a windows server via RDP, with credentials provided via Federated Services?

If so, can you point me to a couple tutorial/examples/help that would be awesome. Or, if not possible, any alternatives that would?
David BarchasAsked:
Who is Participating?
 
Cliff GaliherConnect With a Mentor Commented:
No. You could establish domain trusts, and do so in a way that complies with regulations. But that'd still ultimately be a Kerberos based login. Not one provided by ADFS or any of the protocols (such as SAML) it supports.
0
 
David Johnson, CD, MVPConnect With a Mentor OwnerCommented:
You need some way of authenticating yourself so you will need something that gives you a credential to login. From there you can use logmein rescue, Citrix GotoAssist, TeamViewer etc.  You can't just hop in and out of their managed systems.
0
 
David BarchasAuthor Commented:
Thanks guys. I just needed confirmation that domain trust is the only option for what we need. SAML/ADFS will let us do citrix, but will not provide windows desktop login capability.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.