Shibboleth in Active Directory
Kevin B
kevin at thenext.net
Wed Sep 5 13:43:46 EDT 2018
Thank you for the replies. Can you tell me was it necessary to alter the
auth that the workstations used to authenticate to the DC to get true SSO
with the IdP?
The two articles for tutorials are quite different so I wasn't sure which
were needed if not both:
To use the authn/SPNEGO login flow, it is necessary to have the Kerberos
environment configured and working properly.
Some interesting tutorials that may help are:
http://www.grolmsnet.de/kerbtut/
HTTP-Based Cross-Platform Authentication by Using the Negotiate Protocol
<http://msdn.microsoft.com/en-us/library/ms995329#http-sso-1_topic3>.
On Wed, Sep 5, 2018 at 1:30 PM Volmer, John A. <volmer at anl.gov> wrote:
> We have used Rod's approach below at ANL.
>
> ----- John Volmer, 630.252.5449, volmer at anl.gov -----
>
> -----Original Message-----
> From: users <users-bounces at shibboleth.net> On Behalf Of Rod Widdowson
> Sent: Wednesday, September 5, 2018 8:23 AM
> To: 'Shib Users' <users at shibboleth.net>
> Subject: RE: Shibboleth in Active Directory
>
> Does
>
> https://wiki.shibboleth.net/confluence/display/IDP30/SPNEGOAuthnConfiguration
> help?
>
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
> --
> For Consortium Member technical support, see
> https://wiki.shibboleth.net/confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180905/d93b0602/attachment.html>
More information about the users
mailing list