Concept

The configuration of Back-side Kerberos SSO is split into 2 parts.

Part 1

The first part is in the Airlock Gateway configuration, which defines the following:

  • ●
    If and where Back-side Kerberos SSO is used.

    • Airlock Gateway Mapping configuration

    • ●
      The role set in Access restrictions >> Restricted to Roles.
    • ●
      Under Credential Propagation >> SSO credential propagation, Kerberos is selected.
  • ●
    The system user which is used to request a Kerberos Ticket for the user.

    • Airlock Gateway Back-end Group configuration

    • ●
      The Kerberos Environment selected under Access >> Kerberos Environment.

Part 2

The second part is in the Airlock IAM configuration, which defines the following:

  • ●
    Who should be propagated to the back-end server.