Set up Kerberos authentication

With authentication via Kerberos, a single sign-on mechanism is available in Aeneis. I.e. a user that has been synchronized once via an LDAP server or has also been created manually will then be automatically authenticated and logged in to Aeneis if the following conditions are met:

  1. The workstation (computer) used is logged into the authentication server via a valid ticket.

  2. The user name and domain name of the user logged on to the workstation are the same as those of an Aeneis user.

Note: In contrast to LDAP authentication, Kerberos authentication only involves matching user and domain names. Therefore, it is not absolutely necessary to use users from the LDAP system. Users are matched using the unique user name in Aeneis and the associated domain name assigned to the user. Thus, if a user is created in Aeneis whose user name and domain name (e.g. test.de ) is the same as that of the user currently logged on to the workstation, the user will be logged on to the database without a login screen. The functionality is currently only available for Microsoft Active Directory.