True SSO via kerberos and shib

[caleb racey]

List members may benefit from  a description of how we at Newcastle have setup our IdP to achieve "true sso" via a kerberised login handler.   My colleague Chris Franks has produced the following step by step guide which should help the community to setup true SSO and understand its limitations. 

https://crypt.ncl.ac.uk/login-gateway/docs/Shibboleth_SPNEGO_Setup.pdf

regards

Cal 

Caleb Racey 
Systems Architecture Manager
Newcastle University
UK