This documentation supports the 20.08 version of Remedy Single Sign-On, which is available only to BMC Helix subscribers (SaaS).To view an earlier version, select the version from the Product version menu.

Configuring browser settings for Kerberos authentication

After the Active Directory administrator has configured the Active Directory for Kerberos, the Remedy Single Sign-On administrator has configured a realm for Kerberos authentication, you must make sure that the browser on an end user's system is configured to support Kerberos authentication.


To configure Google Chrome

Google Chrome supports Kerberos authentication. If you configure Internet Explorer, then no additional settings are required for Google Chrome because it uses Internet Explorer settings.

Related topics

Configuring-Kerberos-authentication


Configuring Active Directory as an identity provider for Kerberos authentication


Configuring-a-realm-for-Kerberos-authentication

To configure Internet Explorer

  1. Navigate to Tools > Internet Options > Advanced.
  2. On the Advanced tab and in the Security section, select Enable Integrated Windows Authentication (requires restart).
  3. On the Security tab, select Local Intranet.
  4. Click Custom Level.
  5. In the User Authentication/Logon section, select Automatic logon only in Intranet zone.
  6. Click OK.
  7. Click Sites and select all check boxes.
  8. Click Advanced and add the Remedy SSO service website to the local zone (the website might be already added). For example, https://sample.bmc.com.
  9. Click Add.
  10. Click OK for all pop-ups.

To configure Mozilla Firefox

  1. In the browser window, enter the following URL: about:config.
  2. Click Accept the Risk and Continue.
  3. In the Search preference name field, enter network.negotiate-auth.trusted-uris, and double click it.
  4. Specify a FQDN of the Remedy SSO server with a protocol, for example, https://sample.bmc.com.
  5. Click Save.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*