Setting Single Sign-On Authentication with Kerberos
Kerberos is an enterprise authentication protocol that uses the concept of tickets and three-way authentication to enable users and computers to identify themselves and secure access to resources.
Using Kerberos SSO, users can seamlessly log into Compose and administrators can completely externalize and centrally manage users or group memberships using their existing Kerberos infrastructure.
To set the authentication method to single sign-on with Kerberos, run:
ComposeCtl.exe
configuration set --authentication_method sso-kerberos
To revert the authentication method to standard single sign-on, run:
ComposeCtl.exe
configuration set --authentication_method sso
If the Kerberos protocol fails, Compose will try to log in using NTLM authentication. If NTLM authentication is not enabled in the system, an error will be returned.