Kerberos Delegation Account Password Change
Hello, We have successfully setup client side kerberos SSO with SWG. We had to merge several different keytab files together so that users in every domain could be validated by the APM. My company has a policy of changing service account passwords once a year and this would include changing the password in the Kerberos Delegation Account used to create the keytab files. This maybe a stupid question, but I can't seem to find an answer. Question: Will we need to recreate all our keytab files(and merge them) every time the kerberos delegation account password changes? I have changed the password in my test lab and nothing seems to have broke so I was just curious what should changing the kerberos delegation account password change, besides the password? Thanks!
SSO with SAP BI ( APM )
Hello Team, I have a problem with SSO on SAP BI. My SAP APP have the same URL ( Form Action and Login ), and when i execute SSO its Failed. This is my Parameters and the wich contain form is the same URL that contain de login. So, in my sso_form, i config this. And in my logs, i see that aparently is working But i cannot make this work. Somebody can help me ?
SSO / SAML Integration with existing SAML enabled Web Applications
Hi there, We currently have a single Shibboleth IdP on premise that is configured to provide SSO into various web applications. We are looking to provide users a seamless logon from the webtop into each of these sites but I'm not sure how to go about this. It would be nice for the user to automatically get a SAML token at logon to the webtop (or SSLVPN) and then they would be pre-authenticated when they clicked a weblink. I thought that I could setup the F5 as an SP and get it authenticate against Shibboleth to retrieve the assertion which would then work for the various apps. I don't really want to reconfigure the existing SPs to talk to the F5 if possible. Any ideas on how best to approach this? Cheers Spence
