For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

East_Coast_1151's avatar
East_Coast_1151
Icon for Nimbostratus rankNimbostratus
Mar 19, 2013

Kerberos SSO with two realms

I am working on a solution depicted in the attached file.     Clients are expected to authenticate with a Form-Based front-end provided by F5 APM and using a back-end Active Directory forest ...
config
design
Lloyd_56248's avatar
Lloyd_56248
Historic F5 Account
Mar 19, 2013
Hi, in my experience DNS has to be rock solid for Kerberos Constrained Delegation to work. I would have Kerberos working for one domain, then introduce the second. You might want to add a final SSO Credential Mapping to the policy also.