Odd Eirik Svendsen asked a question.
Is it possible to configure Netscaler to use kerberos impersonation towards Snow Automation Platform?
We are looking into the possibility of using Netscaler as a frontend with two webservers configured with Snow Automation Platform. We also want to add our own authentication on the Netscaler, and were wondering if the traffic from the netscaler to Snow Automation Platform could be sent with kerberos, so that our users wouldn't be prompted with a 2nd logon to Snow AP. Something like this: https://support.citrix.com/article/CTX221696
Hi @Odd Eirik Svendsen ,
I don't know the impersonation configurations well enough to say yes or no, but I know of one example of Azure Application Gateway that worked and one that does not work, using the same gateway configuration.
I don't know the difference in the setup that allows it to work or not.
I believe the working example is not asked to authenticate a second time.
If you have a Netscaler available and have an opportunity to test the setup, I advise you to do so, and please share the result here :)
On webserver side it's not a supported configuration to use multiple sites for AP, but it is technically possible with some caveats. Reach out to your contact at Snow for help on configuring two webservers.
Hope this helped a bit at least :)
//Oskar Frölin
Technical Consultant
Thanks, we have already configured the two web servers working with load balancing, just need the saml + kerberos part to work, just wanted to check if anyone has tried this way before and failed/succeded. Thanks for the reply, will definitely share my results here. :)