Configuring Kerberos Authentication
To integrate Kerberos authentication and Windows authentication for single sign-on (SSO), you must configure the following:
1. Windows Server and Active Directory for Kerberos authentication
2. My webMethods Server for Kerberos authentication
3. Web clients to use Kerberos authentication
Kerberos authentication for SSO might fail in certain cases. For example, an exception might occur while My webMethods Server is processing a Kerberos token. In this case, the default forms authentication redirects unauthenticated requests to a login page or a custom page that you have defined for unauthenticated requests.
Note: If forms authentication is not the default scheme, the authentication scheme that you have configured as default is used for authentication.
In an environment with multiple web clients, you can configure certain web clients to use Kerberos and leave others unconfigured. The unconfigured web clients display a blank page when Kerberos authentication is used for logging in to My webMethods Server. In this case, users can refresh the web clients to use the default authentication scheme for displaying the login page or a custom page.