Authentication and Single sign on with Kerberos and Active Directory (LDAP) on AEM | Community
Skip to main content
himshu1
New Participant
October 16, 2015
Solved

Authentication and Single sign on with Kerberos and Active Directory (LDAP) on AEM

  • October 16, 2015
  • 2 replies
  • 1833 views

We are looking to provide authentication of AEM authors using the company's LDAP. Is there any way in AEM to use the Kerberos based single sign on ? 

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
Best answer by joerghoh

If you want to use Microsoft's version of Kerberos, I suggest you to use an IIS instance to do the authentication and use trusted-header SSO on AEM side. So the IIS adds the username as a header to the request and CQ is configured to trust this header and take it's value as username.

Jörg

2 replies

New Participant
March 14, 2018

We are using Linux server, can we still use Kerberos to do authentication using headers.

joerghoh
joerghohAccepted solution
Employee
October 16, 2015

If you want to use Microsoft's version of Kerberos, I suggest you to use an IIS instance to do the authentication and use trusted-header SSO on AEM side. So the IIS adds the username as a header to the request and CQ is configured to trust this header and take it's value as username.

Jörg