topic Transparent Kerberos SSO Authentication in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/Transparent-Kerberos-SSO-Authentication/m-p/105473#M10007 <P>Hello everyone,&nbsp;</P><P>I'm currently playing with the identity agent and kerberos SSO.</P><P>In the identity awarness admin guide, we can read this :&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="image.png" style="width: 999px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/9727iE2004E941604F108/image-size/large?v=v2&amp;px=999" role="button" title="image.png" alt="image.png" /></span></P><P>Can someone explain this feature ? I understand the gateway is going to read the SID in the kerberos ticket but what is the practial benefit ? Is it going to improve the gateway performance when fetching the user's group ?</P><P>&nbsp;</P><P>Thanks !</P> Tue, 15 Dec 2020 14:52:44 GMT osef 2020-12-15T14:52:44Z Transparent Kerberos SSO Authentication https://community.checkpoint.com/t5/Firewall-and-Security-Management/Transparent-Kerberos-SSO-Authentication/m-p/105473#M10007 <P>Hello everyone,&nbsp;</P><P>I'm currently playing with the identity agent and kerberos SSO.</P><P>In the identity awarness admin guide, we can read this :&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="image.png" style="width: 999px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/9727iE2004E941604F108/image-size/large?v=v2&amp;px=999" role="button" title="image.png" alt="image.png" /></span></P><P>Can someone explain this feature ? I understand the gateway is going to read the SID in the kerberos ticket but what is the practial benefit ? Is it going to improve the gateway performance when fetching the user's group ?</P><P>&nbsp;</P><P>Thanks !</P> Tue, 15 Dec 2020 14:52:44 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Transparent-Kerberos-SSO-Authentication/m-p/105473#M10007 osef 2020-12-15T14:52:44Z Re: Transparent Kerberos SSO Authentication https://community.checkpoint.com/t5/Firewall-and-Security-Management/Transparent-Kerberos-SSO-Authentication/m-p/105531#M10008 <P>It saves the gateway from having to do an LDAP lookup for the user.<BR />Also, the gateway should theoretically pick up group changes faster since Kerberos tickets are exchanged more frequently than LDAP lookups happen.</P> Wed, 16 Dec 2020 01:25:17 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Transparent-Kerberos-SSO-Authentication/m-p/105531#M10008 PhoneBoy 2020-12-16T01:25:17Z