Forum Discussion

EmBee_57573's avatar
EmBee_57573
Icon for Nimbostratus rankNimbostratus
Feb 24, 2014

NTLM SSO for end-users in a AD domain

Hi, I have users which are already authenticated within the AD domain. My BIG-IP APM/LTM should do the following:   provide SSO to the backend server: the SharePoint server should see the user cr...
BIG-IP Access Policy Manager (APM)
design
security
Michael_Koyfma1's avatar
Michael_Koyfma1
Icon for Cirrus rankCirrus
Feb 24, 2014

Yes, using NTLM on the front-end is possible - but because NTLM authentication cannot be proxied - meaning that APM does not get user's password during NTLM authentication - so regardless of whether you use Kerberos or NTLM to authenticate to APM, you will have to setup Kerberos Constrained Delegation on the backend for SSO.