Forum Discussion
C_Schaerli_2808
Nimbostratus
NimbostratusSSL certificate conversion to AD Kerberos credentials
It is possible to accept an SSL certificate off of a device and use the info in the certificate to pull credentials/kerberos ticket from AD and pass that along to an application to authenticate a use...
MichaelatF5
Employee
EmployeeAbsolutely. An example for Apache can be found here: https://devcentral.f5.com/articles/us-federal-enabling-kerberos-for-smartcard-authentication-to-apache?tag=federal
The main difference between Apache and IIS on the APM side is switching from on 401 to Always in the SSO profile, and also you dont need to generate any Keytabs on a windows server (unless you want to) and you can just use a service account.
