it is just perfect. But to log on I need to log remotely to Enforce server first. And then launch web browser and log on to web console.
Right now the only solution I see is to let SDLP users log on to the Enforce server remotely with their own credentials (which will be limited to only launch browser) and then log on console using that browser.
How to skip RDP part of this?