When making a request for an RDP application session, the connection string is incorrectly passing the "asset" variable using the Access Request Policy > Security tab > "Application Display Name" field rather than the actual asset name of the application asset.
A critical part of any remote application session is the OILauncher that is installed on the remote application host. The OILauncher not only launches the remote application, it also injects 3 parameters into an application's commandline before the remote application is launched. These 3 parameters are {username}, {password} and {asset}. The initial problem was that the Application Display Name was being sent through to the OILauncher as the injected {asset} parameter rather than the actual Application asset name. Keep in mind that when we are talking about an asset now, the asset isn't necessarily a platform or a piece of hardware. With remote application sessions there is a new kind of asset which is the application itself. (ie. Notepad, MySql client, Oracle client, etc.). When you define an asset with accounts to be used in an application session, the asset here is the application and the application (aka. asset) can have accounts associated with it.
Getting back to the problem. The Application Display Name is defined as part of the access policy on the Security tab.
This is the value that was being passed in as the {asset} to the OILaunch, which was wrong. What should have been passed in as the asset is the actual application asset name as it was defined under asset management on the Asset Management->Properties->General tab.
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center