Citrix FAS - The HTTP request was forbidden with client authentication scheme 'Anonymous'.
Article ID: CTX579538
Updated On:
Description
When connecting to a particular VDA, the following event error occurs: "[S104] Identity Assertion Logon failed. Failed to connect to Federated Authentication Service: UserCredentialService [Address: FASServer [Index: 0] [Error: The HTTP request was forbidden with client authentication scheme 'Anonymous'.
Other VDA's do not have this issue.
Resolution
- Disable WPAD protocol on Windows Server.
- Once this is disabled, authentication should begin to function as normal: https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/disable-http-proxy-auth-features#how-to-disable-wpad.
Problem Cause
After checking the network traces on the VDA, we could see connections were going through a user proxy.As the VDA machines were configured using DHCP, BrokerAgent was using WPAD information for WebSocket request for this VDA machine. This is not in use on working VDAs.
Was this article helpful?
Yes
No
Powered by
