Transparent Kerberos SSO Authentication

May the 4th (+4)
Roadmap Session and Use Cases for
Cloud Security, SASE, and Email Security

SASE Masters:
Deploying Harmony SASE for a 6,000-Strong Workforce
in a Single Weekend

Paradigm Shifts: Adventures Unleashed!
Capture Your Adventure for a Chance to WIN!

Join the Photo Contest!

Mastering Compliance
Unveiling the power of Compliance Blade

WATCH NOW

CPX 2024 Content
is Here!

Get What You Need

Harmony SaaS
The most advanced prevention
for SaaS-based threats

LEARN MORE

CheckMates Go:
CPX 2024 Recap

LISTEN NOW

Create a Post

Hello everyone,

I'm currently playing with the identity agent and kerberos SSO.

In the identity awarness admin guide, we can read this :

Can someone explain this feature ? I understand the gateway is going to read the SID in the kerberos ticket but what is the practial benefit ? Is it going to improve the gateway performance when fetching the user's group ?

Thanks !

1 Reply

It saves the gateway from having to do an LDAP lookup for the user.
Also, the gateway should theoretically pick up group changes faster since Kerberos tickets are exchanged more frequently than LDAP lookups happen.