Need to implement Kerberos SSO in Pega

Question

Gowtam Mogalla

Member since 2014

3 posts

ING Australia

Posted: Oct 3, 2018

Last activity: Oct 15, 2018

Posted: 3 Oct 2018 16:33 EDT
Last activity: 15 Oct 2018 0:07 EDT

Closed

Need to implement Kerberos SSO in Pega

Report

I need to implement the Kerberos based authentication in Pega 7.2.2. I have implemented the following steps:

Updated the web.xml to enable Kerberos as it was commented by default
Added the SPNEGO7.jar to the application lib folder
Added the following configuration files to server running path, as per SPNEGO documentation

krb5.config
login.conf

<init-param>

<param-name>spnego.krb5.conf</param-name>

<param-value>krb5.conf</param-value>

</init-param>

<init-param>

<param-name>spnego.login.conf</param-name>

<param-value>login.conf</param-value>

</init-param>

Is this two configuration files are enough or we need the key tab file or this file creation is taken care by Pega.

Also the IT team is not sure about the Krb5.conf file. Need some inputs on it,to guide the IT team

https://community.pega.com/knowledgebase/articles/using-kerberos-credentials-pega-application-authenticate-and-access-external

http://spnego.sourceforge.net/reference_docs.html

Any real time experience on this implementation will be really helpful. Please provide your valuable inputs and thanks in advance. Also attached the updated the web.xml enabling Kerberos settings.

***Updated by moderator: Lochan to update platform capability***

To see attachments, please log in.

Low-Code App Development