Kerberos Auth + SSO with Sharepoint 2010
We have a special request:
Build an authentication page blocking all access to sharepoint before Kerberos authentication is done in a nice company branded page.
Arrange F5 Kerberos authentication integration with Sharepoint to support Single Sign on.
After authentication keep session active (timer ? managed by the F5 ? by the Sharepoint ? Until logged out of sharepoint ?)
I don't really know where to begin.
It seems I have to play with Kerberos delegation
I've already asked to client to see if he has the ADD CLIENT AUTHENTICATION license.
Any info would be nice. Is this scenario even possible ? (client has 10.2.1)