[IAG] Domain monitoring single sign-on failed

Problem Description

IAG is doing domain monitoring single sign-on, but none of the online users are showing single sign-on

Process——

1. Confirm that the PC has joined the domain
   
   160625b5aec37c3d09.png (221.24 KB)
2. The domain monitoring single sign-on test validity fails, and the number of users recently obtained is zero
   
   698645b5aecb01d41b.png (70.58 KB)
3. Check if the security log audit permission in the AD domain server is enabled.
   
   11785b5aee8e787a2.png (72.14 KB)

Root cause

The security log audit permission in the AD domain server is not enabled

solution

Enable audit permissions for security logs on the AD domain server

832555b5aed88e704f.png (59.69 KB)

Original Link

https://support.sangfor.com.cn/cases/list?product_id=22&type=1&category_id=6165&isOpen=true