The list of available user domains can be provided to connecting clients prior to user authentication, and if provided, the list can be displayed to users in a drop-down menu.
This information is withheld by default but can be provided by activating the Send domain list global setting in Horizon Console.
It is safe to provide the domain list to clients if they connect to the environment through a Unified Access Gateway appliance that is configured to perform two-factor pre-authentication. The domain list is not sent to a client until pre-authentication is successful. For more information on configuring two-factor authentication for a Unified Access Gateway appliance, see the Unified Access Gateway documentation at https://docs.omnissa.com.
The Hide domain list in client user interface setting affects the client's user interface only, it doesn't change what information the server provides to the client. This setting is deactivated by default.
When users log in to a server, and Send domain list is deactivated, and Hide domain list in client user interface is activated, the Domain drop-down menu in Horizon Client shows *DefaultDomain* and users might need to enter a domain, for example, username@domain, in the User name text box. If users do not enter the domain manually, and if more than one domain is configured, they might fail to log in to the server.
The following table shows how the Send domain list and Hide domain list in client user interface global settings determine how users can log in to the server.
| Send domain list setting | Hide domain list in client user interface setting | How users log in |
|---|---|---|
| Deactivated (default) | Activated (default) | The Domain drop-down menu is hidden. Users must enter one of the following values in the User name text box.
|
| Deactivated | Deactivated | If a default domain is configured on the client, the default domain appears in the Domain drop-down menu. If the client does not know a default domain, *DefaultDomain* appears in the Domain drop-down menu. Users must enter one of the following values in the User name text box.
|
| Activated | Activated | The Domain drop-down menu is hidden. Users must enter one of the following values in the User name text box.
|
| Activated | Deactivated | The domains sent by the server will appear in the Domain drop-down menu. If a default domain is configured, it will be preselected, but the user can still choose a different domain if more than one is available.
If domain list ordering is configured at the server then domains will be shown in the drop-down menu in configured order, otherwise they will be shown in lexical order. See the pae-ClientDomainsOrdering attribute in Security-Related Settings in Horizon LDAP for details.
Users must enter one of the following values in the User name text box.
|
Was this page helpful?