Johnnie, In your guacamole properties, you can configure the extension priority so that you can hit the guacamole login screen without being automatically redirected to your IdP. This should allow you to still log in guacadmin (or any non-SSO account), while preserving your SSO functionality. You will set the priority according to the method used for SSO. I've provided two examples below with links to the documentation.
extension-priority: *, saml extension-priority: *, openid https://guacamole.apache.org/doc/gug/saml-auth.html#presenting-unauthenticated-users-with-a-login-screen https://guacamole.apache.org/doc/gug/openid-auth.html#presenting-unauthenticated-users-with-a-login-screen On Fri, Apr 5, 2024 at 3:13 PM Tom Eaton <[email protected]> wrote: > I created a guacadmin account in the IDP, this works and let's you use the > guacadmin account as normal. > > On Fri, 5 Apr 2024, 19:59 Johnnie W Adams, <[email protected]> wrote: > >> Hi, folks, >> >> I've inherited a single instance of Guacamole which is behind SSO. >> >> This is unfortunate, because I can't log in as guacadmin. How do you >> folks set up to go around SSO with admin logins? >> >> Thanks, >> >> John A >> >> -- >> John Adams >> Senior Linux/Middleware Administrator | Information Technology Services >> +1-501-916-3010 | [email protected] | http://ualr.edu/itservices >> *UA Little Rock* >> >> Reminder: IT Services will never ask for your password over the phone or >> in an email. Always be suspicious of requests for personal information that >> come via email, even from known contacts. For more information or to >> report suspicious email, visit IT Security >> <http://ualr.edu/itservices/security/>. >> > -- Regards, Chris
