On Fri, Apr 5, 2024 at 3:44 PM Chris Jordan <cjor...@webhse.com> wrote:
> Johnnie, > > In your guacamole properties, you can configure the extension priority so > that you can hit the guacamole login screen without being automatically > redirected to your IdP. This should allow you to still log in guacadmin (or > any non-SSO account), while preserving your SSO functionality. You will set > the priority according to the method used for SSO. I've provided two > examples below with links to the documentation. > > extension-priority: *, saml > extension-priority: *, openid > > > https://guacamole.apache.org/doc/gug/saml-auth.html#presenting-unauthenticated-users-with-a-login-screen > > https://guacamole.apache.org/doc/gug/openid-auth.html#presenting-unauthenticated-users-with-a-login-screen > > On Fri, Apr 5, 2024 at 3:13 PM Tom Eaton <t...@htil.net> wrote: > >> I created a guacadmin account in the IDP, this works and let's you use >> the guacadmin account as normal. >> >> On Fri, 5 Apr 2024, 19:59 Johnnie W Adams, <jxad...@ualr.edu> wrote: >> >>> Hi, folks, >>> >>> I've inherited a single instance of Guacamole which is behind SSO. >>> >>> This is unfortunate, because I can't log in as guacadmin. How do >>> you folks set up to go around SSO with admin logins? >>> >>> It's worth noting that the functionality that Chris mentions was added in version 1.4.0, so if this inherited instance is an earlier version, you'll need to upgrade to get this functionality. -Nick
