question

zoras-4257 avatar image
0 Votes"
zoras-4257 asked AnshulKumarMINDTREELIMITED-5501 commented

SSO (AD + application) configuration guide

I got two machines, both with Windows Server 2016.
One with AD (not Azure AD) and one with an Java container (KARAF) and Krb5LoginModule (from JAAS).
I want to set up Kerberos 5 in this environment, so that the Java machine can authenticate a user by contacting the KDC (AD).

Is there a (step by step) guide, article or documentation to set up/configure an SSO application? Like starting the service on AD, changing user settings for making them fit to authenticate, register spn, etc. Also maybe on application side (I know that java has no place here, but the settings must be similar).

Thanks in Advance

windows-active-directorywindows-server-2016
· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi, if the posted answer resolves your question, please mark it as the answer by clicking the check mark. Doing so helps others find answers to their questions.

0 Votes 0 ·

1 Answer

Thameur-BOURBITA avatar image
0 Votes"
Thameur-BOURBITA answered FanFan-MSFT commented

Hi,

I don't think that here you will find a documentation about Java application.
You can ask this question on Java forum. Here there is only Microsoft specialist.
based on my experience, you have to know if the Java application you are used needs :

  • a service account

  • Check if a keytab file is required

  • A SPN set on service account

You should check with the developer who should know if the application requires a service account with keytab file or only a service account to ensure the SSO using kerberos protocol. He should know also which SPN should be set for this application.





Please don't forget to mark helpful reply as answer





· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi,
Feel free to let us know, if you have any questions about the AD.

Best Regards,

0 Votes 0 ·