Comments (3)
Kerberos is actually an implementation of token-based (token there is called ticket) authentication made by Microsoft and used only in intranet (or if you establish a VPN connection, so you're in intranet anyway) based on Windows server. It's not supported by many proxy servers, as well as by Java, as it's not described in RFC-2069 for proxy authentication.
Extremely simple explanation of the difference between classic token-based authentication is that in Windows environment the Kerberos ticket is issued not when you are authenticated by a browser but when you're logged in to your Windows account (although can be re-issued by a special request) and it's stored in your Windows, not in a browser.
from auth-boss.
Kerberos is actually a protocol developed in MIT. Current version is 5.
Almost all OS have it's implementation, not only Windows server, including GSS-API (RFC 2853). Java has implementation of this RFC. Read here, here and here.
Browser delegates OS to request required TGT from TGS and passes it (TGT) to server if required.
The only server needs to support SSO is to send specified headers and decode received TGT. Google existing implementations.
p.s. Kerberos uses principle of token based authentication
if i was you i wanna be me too
from auth-boss.
Yes, you're right, but the topic starter asked about Active Directory, so my comment was exactly about Microsoft implementation.
from auth-boss.
Related Issues (5)
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from auth-boss.