Question

1
Replies
970
Views
GowthamM8902 Member since 2014 2 posts
Incessant Technologies
Posted: October 3, 2018
Last activity: October 15, 2018
Closed

Need to implement Kerberos SSO in Pega

I need to implement the Kerberos based authentication in Pega 7.2.2. I have implemented the following steps:

  1. Updated the web.xml to enable Kerberos as it was commented by default
  2. Added the SPNEGO7.jar to the application lib folder
  3. Added the following configuration files to server running path, as per SPNEGO documentation
  • krb5.config
  • login.conf
<init-param>
<param-name>spnego.krb5.conf</param-name>
<param-value>krb5.conf</param-value>
</init-param>
<init-param>
<param-name>spnego.login.conf</param-name>
<param-value>login.conf</param-value>
</init-param>

Is this two configuration files are enough or we need the key tab file or this file creation is taken care by Pega.

Also the IT team is not sure about the Krb5.conf file. Need some inputs on it,to guide the IT team

https://community.pega.com/knowledgebase/articles/using-kerberos-credentials-pega-application-authenticate-and-access-external

http://spnego.sourceforge.net/reference_docs.html

Any real time experience on this implementation will be really helpful. Please provide your valuable inputs and thanks in advance. Also attached the updated the web.xml enabling Kerberos settings.

***Updated by moderator: Lochan to update platform capability***

Low-Code App Development Security
Moderation Team has archived post
Share this page LinkedIn