RDP with SPP injection

Hello all,

i am trying to set up RDP with SPP password injection. The environment is set up according to admin guide and/or bootcamp lab guide. SPS initiated connection without SPP injection is working as intended.

When trying the SPP password injection setup, after authentication on the RDP gateway server i get this strange error from  SGAA plugin. SPP API is expecting parameter "ForProvider" which has value of empty string in my case. Authorization then fails and connection with RDP gateway gets closed.

i am connecting to RDP gateway with user darko@lab.local who is also a user on SPP and has an Entitlement with access policy for RDP on Asset IDM01 with Account ADM_darko. User, asset and account are part of the same domain. 

2025-07-11T09:35:50+02:00 sps1.lab.local zorp/scb_rdp[1709]: scb.info(4): (svc/jStMEB6krnYkUja7WDJNbb/rdp_gateway_withspp:12:1/stub): Plugin(aa/SGAA/main.py): GET request; url=https://192.168.88.111:8649/service/SPSInteractive/v3/AccessRequestBroker/RequestableAssets, parameters={'Filter': "((NetworkAddress eq '192.168.88.131') OR (NetworkAddress ieq 'idm01.lab.local')) AND ((AllowSessionRequests eq true) AND (SessionAccessProperties.RemoteDesktopSessionPort ne null))", 'ForUser': 'darko@lab.local', 'ForProvider': ''}, auth=SPSInteractive

2025-07-11T09:35:50+02:00 sps1.lab.local zorp/scb_rdp[1709]: scb.info(4): (svc/jStMEB6krnYkUja7WDJNbb/rdp_gateway_withspp:12:1/stub): Plugin(aa/SGAA/main.py): https://192.168.88.111:8649 "GET /service/SPSInteractive/v3/AccessRequestBroker/RequestableAssets?Filter=%28%28NetworkAddress+eq+%27192.168.88.131%27%29+OR+%28NetworkAddress+ieq+%27idm01.lab.local%27%29%29+AND+%28%28AllowSessionRequests+eq+true%29+AND+%28SessionAccessProperties.RemoteDesktopSessionPort+ne+null%29%29&ForUser=darko%40lab.local&ForProvider= HTTP/1.1" 400 87

2025-07-11T09:35:50+02:00 sps1.lab.local zorp/scb_rdp[1709]: scb.info(4): (svc/jStMEB6krnYkUja7WDJNbb/rdp_gateway_withspp:12:1/stub): Plugin(aa/SGAA/main.py): [ERROR] Missing ForUser or ForProvider parameters.; code=60709, data={"Code":60709,"Message":"Missing ForUser or ForProvider parameters.","InnerError":null}

Does anyone know where this parameter is obtained from or how do i pass it to the plugin? I have a setup of 1x SPP - 1x SPS on a version 8.0.1 LTS

Thank you,

Darko

Parents Reply Children
No Data