Indeed PAM Gateway

The Indeed PAM Gateway component is installed onto Remote Desktop Session Host server. If there are several RDSH servers, then the Indeed PAM Gateway has to be installed onto each of them.

All URLs are specified in lowercase.

Switch to C:\Program Files\Indeed PAM\Gateway\ProxyApp folder and edit Pam.Proxy.App.exe.config file:

Api section

  • ApiUrl - URL of Indeed PAM Core

    "Api": {
  "ApiUrl": "https://pam.domain.local/pam/core"


Auth section

  • IdpUrl - URL of Indeed PAM IdP

  • GatewaySecret - Secret for additional component authentication

    The secret is generated by the console utility Pam.ConsoleApp.exe


    "Auth": {
  "IdpUrl": "https://pam.domain.local/pam/idp",
  "IdpRequiresHttps": true,
  "GatewaySecret": "m0Kvn2YdIAivB2UeILq65y5Qio2eijY+kmbjyn8istcQLU/xRLUowkCR5WEFSaagrv/s7Dc+Nm9pn09NAA0xVA=="
},


Media section

  • VideoTempPath - path to the temporary files folder

    "Media": {
  "VideoTempPath": "C:\\ProgramData\\Indeed\\Pam\\VideoTemp\\"
},


Configuration of session collection

  1. Log in to the server that performs Remote Desktop Connection Broker role and run Server Manager
  2. Switch to Remote Desktop Services - Collections
  3. In the Collections section click Tasks and select the Create session collections item
  4. Create a collection with parameters you need using the wizard
  5. Click Tasks in the RemoteApp Programs section and select Publish RemoteApp Programs item
  6. Click Add, select the C:\Program Files\Indeed PAM\Gateway\ProxyApp\Pam.Proxy.App.exe application, click Next and then Publish
  7. Open the context menu of the published application in the RemoteApp Programs section and select Edit Properties item
  8. Switch to Parameters, mark the Allow any command-line parameters option and click ОK