MultiDomain SSO does not works with SafeSquid-SWG

Tell everybody, what you think about SafeSquid!
Speak your mind!
India aashish97
Posts: 117
Joined: Sat Jul 06, 2019 10:45 am

MultiDomain SSO does not works with SafeSquid-SWG

Post by aashish97 » Fri Feb 14, 2020 7:53 am

Hello All,

Recently I came across a Client's Problem,

Client Requirement Details:
--------------------------------------
Client Setup has 2 AD Servers and all the machines are connected to either of the domain.
They wanted SafeSquid-SWG to Support Kerberos Authentication so that the users are identified by their Logged in Crendetials rather than the user manually typing the password.
They wanted both their AD to b integrated into SafeSquid-SWG with Kerberos.

Problem Faced:
----------------------
SafeSquid Supports Kerberos Authentication but when 2 Domains are Integrated and Kerberos is enabled for both.
As per the Current Limitations the HTTP.keytab, because of which the second Domain's Kerberos Authentication Fails.