Corporate networks use AD mostly to authenticate users – in that desktop machines require signing in to a Windows domain – which is centrally managed/universal.
Now, if I had an iPad and I brought it into work, I wanted to be able to sign in to my AD so that if I type http://internal.link into my iPad browser, it would resolve just like it would on a Windows desktop machine inside that corporate network.
To do this, I presume that the iPad will discover the company wifi network, and I would like to sign in to that wifi using my corporate AD credentials. This leads me to my questions:
- How can a wifi network tie itself to Active Directory, granting sessions only to properly authenticated AD users? Do I need to purchase particular wifi routers or do anything specific on the AD side?
- If I was to sign in successfully somehow using my AD credentials, I will then have use of the company wifi – with accompanying access privileges to resolve internal-only URL’s. What would it then take to get my iPad browser to enjoy features that are available to corporate IE users such as SSO (seamless sign on)? At worst, would an application at http://internal.link simply prompt me to sign in again with my AD credentials?
You’re talking about two different technologies here:
With that said, your work probably has some sort of wireless authentication mechanism. I’ve never heard of them using AD for that, but I suppose it’s possible. You need to get on the work’s wifi. Once there, your IPad will either pick up it’s DNS server settings from the network via DHCP, or you will have to manually configure them (most wifi networks use DHCP these days).
Assuming you are successful in getting on the Wi-Fi, and assuming that your DNS servers are established (via DHCP or otherwise), you should be able to hit any internal site from the iPad as long as the wifi network has access to those internal sites. There are various reasons that it wouldn’t (i.e. firewalls, etc.). The internal site, if it’s using AD/NTLM will ask you for credentials when you first visit it. You can usually just supply your AD username and password, and it will work fine.