Authentication and Single sign on with Kerberos and Active Directory (LDAP) on AEM

[himshu1]

We are looking to provide authentication of AEM authors using the company's LDAP. Is there any way in AEM to use the Kerberos based single sign on ? 

[Jörg_Hoh · Accepted solution]

If you want to use Microsoft's version of Kerberos, I suggest you to use an IIS instance to do the authentication and use trusted-header SSO on AEM side. So the IIS adds the username as a header to the request and CQ is configured to trust this header and take it's value as username.

Jörg

[ramgopalm545617]

We are using Linux server, can we still use Kerberos to do authentication using headers.