(Workaround) Support Kerberos authentication

  • リリースバージョン: Australia
  • 更新日 2026年03月12日
  • 所要時間：1分

    • A workaround is available for the SAML 2.0 integration that changes the authentication context from forms-based authentication to Windows-based authentication.

    始める前に

    Role required: sso_config_admin, business_rule_admin, script_include_admin

    このタスクについて

    Currently, the SAML 2 integration uses a PasswordProtectedTransport or "forms-based authentication" authentication context. This authentication context requires the IdP to present users with a form for authentication credentials. With Kerberos, a SAML session is already active through an established Windows login, so the user does not need to authenticate with the IdP.

    手順

    1. Navigate to All > Multi-Provider SSO > Identity Providers.
    2. Open the SAML2 Update1 IdP record.
    3. Set the The AuthnContextClassRef method that we will be included in our SAML 2.0 AuthnRequest to the Identity Provider to one of the following:
      表 : 1. AuthnContextClassRef method values
      urn:oasis:names:tc:SAML:2.0:ac:classes:PasswordProtectedTransport (Default)
      urn:federation:authentication:windows
    4. Click Update.