Users Guide

For more information about how to configure the network and VPN settings, see the Dell Wyse ThinOS Version 9.1
Administrator's Guide at www.dell.com/support.
● Virtual Desktop Infrastructure (VDI) broker agent authentication—User can use AD user credentials to authenticate
to remote VDI brokers agents to access remote sessions and remote resources. Credential type can be a domain username
with a password or a smart card. You can also use other types of authentication which are supported by both remote
systems and thin client. User credentials are configured and managed by remote resource systems such as AD controllers
and broker agents.
The following are the remote connections deployment options:
○ Citrix Virtual Apps and Desktops
○ VMware Horizon
○ Windows Virtual Desktop
○ Windows Remote Desktop Services
○ Amazon WorkSpaces
○ Teradici Cloud Access
○ Direct RDP connections
To configure the broker agent settings, do the following:
1. On the ThinOS client, open the local Admin Policy Tool, or go to the ThinOS 9.x policy settings on Wyse Management
Suite.
The Configuration Control | ThinOS page is displayed.
2. On the Advanced tab, expand Broker Settings and configure your preferred broker agent settings.
3. Click Save & Publish.
You can also use the local ThinOS UI to configure the broker agent settings. For more information about broker agent
settings, see the Dell Wyse ThinOS Version 9.1 Administrator's Guide at www.dell.com/support.
● Active Domain authentication—User can use AD user credential to authenticate to domain controller (NTLM) and access
the AD group of the user from Wyse Management Suite. A username with a valid password is used for authentication. User
credentials are configured and managed by remote resource systems such as AD controllers.
To configure the active domain controller (NTLM) settings, do the following:
1. On the ThinOS client, open the local Admin Policy Tool, or go to the ThinOS 9.x policy settings on Wyse Management
Suite.
The Configuration Control | ThinOS page is displayed.
2. On the Advanced tab, expand Login Experience, and click Login Settings.
3. From the Login Type drop-down list, select Authenticate to domain controller.
4. Specify the AD group prefix.
5. Click Save & Publish.
ThinOS authenticates to the domain controller of the active domain to which the user belongs.
● Multifactor, token, and certificate-based authentication—Multifactor authentication is configured by remote resource
system administrators. ThinOS supports Citrix Application Delivery Controller (ADC), formerly known as Citrix NetScaler. The
following authentication methods are supported:
○ LDAP
○ RSA
○ DUO
○ SMS PASSCODE
○ Native OTP
○ Federated Authentication Service with Azure active directory
○ OKTA
ThinOS supports user authentication using third-party authentication applications. ThinOS supports the following third-party
authentication types:
○ Imprivata—ThinOS supports Imprivata on Citrix, VMware, and Microsoft VDI solutions in both Imprivata ProveID
Embedded and ProveID Web API modes.
○ Identity Automation—ThinOS supports RapidIdentity for Healthcare (formerly HealthCast) SSO solution.
ThinOS supports smart card or certificate-based authentication to authenticate TLS connections to remote hosts.
Product and subsystem security
11