Kerberos SSO

The Integrated Windows Authentication is a set of protocols and procedures that allows a user, who has connected to a Microsoft Windows workstation with his Domain credentials, to access the applications without enter his credentials again. We are, in practice, in a Single SignOn scanario.

While standard Liferay only supports the NTLM protocol, this plugin, created by SMC, allows Liferay to participate in the Single SignOn using Kerberos.

Read the documentation for more details on how Integrated Windows Authentication works and how to configure the different actors (Liferay, the browser, etc).