Forum Discussion
tminfw2
Nimbostratus
NimbostratusClient authentication methods versus Single Sign On methods
Currently, we mostly have the following structure for our APM profiles:
Present a logon page Verify entered username/password using any of these methods: LDAP, AD, Radius,... Map username and...
Yann_Desmarest_
Nacreous
NacreousHello,
You are right, when choosing Kerberos, client certificate or ntlm authentication, you retrict your capabilities on the authentication mecanism supported on the backend for SSO.
When using authentication mecanism not prompting for password, you can only use kerberos delegation, saml or header based SSO.
tminfw2Nimbostratus
NimbostratusJust checked the ntlmv2 SSO config and indeed you need a password source for the SSO profile. I will take this up with my team next week.