SSO

Ah, I thought I had configured kerberos on the debian box previously but I must have been thinking of another machine. I’m guessing all will be well once I have finished sorting that out.

OK, kerberos working in apache now but still no joy. Am I barking up the wrong tree?

The LDAP provider will communicate directly with the LDAP server, so no real concept of SSO. You can use one of the other providers like CAS, which adds the ability to do things like SSO and multi-factor authentication. (CAS servers are often backed by LDAP internally.) But that does require more setup on your authentication server on the other end.

Ah, so no easy way to get kerberos to work with this then? I may end up having to go down the SAML route.

Excellent plugin though, very nearly got me where I needed to, it’s only our infrastructure that let me down.

Sorry about that! I do think we could put direct Kerberos support on the roadmap, but with how our schedules are looking currently I doubt it will happen anytime soon. Our institution doesn’t use it heavily so it’s not a priority. Good luck with everything.