Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
osef
Contributor

Transparent Kerberos SSO Authentication

Hello everyone, 

I'm currently playing with the identity agent and kerberos SSO.

In the identity awarness admin guide, we can read this : 

image.png

Can someone explain this feature ? I understand the gateway is going to read the SID in the kerberos ticket but what is the practial benefit ? Is it going to improve the gateway performance when fetching the user's group ?

 

Thanks !

Labels (1)
0 Kudos
Reply
1 Reply
PhoneBoy
Admin
Admin

It saves the gateway from having to do an LDAP lookup for the user.
Also, the gateway should theoretically pick up group changes faster since Kerberos tickets are exchanged more frequently than LDAP lookups happen.

0 Kudos
Reply