In RemoteApp mode, the user launches the application from the user console and Privileged Account Manager does a SSO to the application using the SSO module installed in the server. For more information about RemoteApp mode, see the RemoteApp Mode section in the Privileged Account Manager Installation Guide.
Ensure to perform the following for a seamless Application SSO configuration to work :
Specify Remote Desktop Services licensing per user
Change the Registry key single session per user from 1 to 0 in (HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\TerminalServer fSingleSessionPerUser
Navigate to Local Computer Policy > Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Connections and specify the Limit Number of Connections to 999999.
On your computer, navigate to Group Policy Editor > Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host and set time limit for disconnected sessions.
On your computer, navigate to Group Policy Editor > Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host and enable Set time limit for loggoff of Remote App Sessions and set RemoteApp Session logoff delay to Immediately.
Click Remote Desktop Service > Session Collection properties > Edit Properties > Session > Configure Session Settings and specify End a disconnected session as 1 minute.
The following sections explain how to configure application SSO using RemoteApp mode and how to view application SSO reports: