Single Sign On (Active Directory & kerberos)?
2 answers
There has been some preliminary, unsupported work done to show that the Web UI can participate in Kerberos/SPENGO authentication when the server is configured with WAS and Active Directory. The rich client is known not to support Kerberos/SPENGO authentication at this time.
The plan item for Kerberos support is here:
Hi Dan\Sec,
http://www-01.ibm.com/support/knowledgecenter/SSYMRC_6.0.0/com.ibm.jazz.install.doc/topics/c_kersso_svr_platform_support.html?lang=en
Supported platforms
Kerberos with Simple and Protected GSS-API Negotiation Mechanism (SPNEGO) authentication is available on multiple operating systems and multiple Java Platform Enterprise Edition (Java EE) web containers.
However, in version 6.0 of Rational® solution for Collaborative Lifecycle Management (CLM), support is limited to the following platforms:
- Microsoft Active Directory running on Windows Server 2008 R2 or later
- IBM® WebSphere® Application Server Version 8 or later
Regards,
Arun.