F5 Sites
  • F5.com
  • F5 Labs
  • MyF5
  • NGINX
  • Partner Central
  • Education Services Portal (ESP)
Contact
  • Under Attack?
  • F5 Support
  • DevCentral Support
  • F5 Sales
  • NGINX Sales
  • F5 Professional Services
Skip to contentBrand Logo
Forums
CrowdSRC
Articles
GroupsEventsSuggestionsHow Do I...?
RegisterSign In
  1. DevCentral
  2. Articles
  3. Technical Articles

APM Cookbook: Single Sign On (SSO) using Kerberos

To get the APM Cookbook series moving along, I’ve decided to help out by documenting the common APM solutions I help customers and partners with on a regular basis. Kerberos SSO is nothing new, bu...
Published Apr 28, 2014
Version 1.0
BIG-IP Access Policy Manager (APM)
cookbook
kerberos
microsoft
security
SSO
Smithy's avatar
Smithy
Icon for Cirrostratus rankCirrostratus
Joined July 31, 2011
View Profile
Saravanan_M_K's avatar
Saravanan_M_K
Icon for Employee rankEmployee
Oct 03, 2023

I followed this article and for me after I browse to the virtual server and submitted the credentials in the login form (username/password), on backend, it is indeed hitting the pool member, but on the user side, it is prompting me with another credential popup for username/password.

NTP is fine.

time is in sync on all the three dog heads. (client, server, KDC).

DNS A, PTR records are in place.
no duplicate SPN.

It was not working.  Basically SSO is not triggering.

Finally I found the root cause. On the SSO object configuration for the username, article says to use "apm-kcd".  But when I used it, it was not working.  After changed it to host/apm-kcd.f5.demo SSO started working. 

Help guide the future of your DevCentral Community!

What tools do you use to collaborate? (1min - anonymous)

ABOUT DEVCENTRAL

DevCentral NewsTechnical ForumTechnical ArticlesTechnical CrowdSRCCommunity GuidelinesDevCentral EULAGet a Developer Lab LicenseBecome a DevCentral MVP

RESOURCES

Product DocumentationWhite PapersGlossaryCustomer StoriesWebinarsFree Online CoursesTraining & Certification

SUPPORT

Manage SubscriptionsProfessional ServicesCreate a Service RequestSoftware DownloadsSupport Portal

PARTNERS

Find a Reseller PartnerTechnology AlliancesBecome an F5 PartnerLogin to Partner Central

©2024 F5, Inc. All rights reserved.
TrademarksPoliciesPrivacyCalifornia PrivacyDo Not Sell My Personal Information