Authentication and Single sign on with Kerberos and Active Directory (LDAP) on AEM | Community
Skip to main content
himshu1
New Participant
Oct 16, 2015 2:26 AM UTC
Solved

Authentication and Single sign on with Kerberos and Active Directory (LDAP) on AEM

We are looking to provide authentication of AEM authors using the company's LDAP. Is there any way in AEM to use the Kerberos based single sign on ? 

This post is no longer active and is closed to new replies. Need help? Start a new post to ask your question.
joerghoh
joerghohAccepted solution
Employee
Oct 16, 2015 2:26 AM UTC

If you want to use Microsoft's version of Kerberos, I suggest you to use an IIS instance to do the authentication and use trusted-header SSO on AEM side. So the IIS adds the username as a header to the request and CQ is configured to trust this header and take it's value as username.

Jörg

2 replies

Level 4
Mar 14, 2018 10:39 AM UTC

We are using Linux server, can we still use Kerberos to do authentication using headers.

Translate
joerghoh
joerghohAccepted solution
Employee
Oct 16, 2015 2:26 AM UTC

If you want to use Microsoft's version of Kerberos, I suggest you to use an IIS instance to do the authentication and use trusted-header SSO on AEM side. So the IIS adds the username as a header to the request and CQ is configured to trust this header and take it's value as username.

Jörg

Translate