User registry and platform support for SPNEGO

WebSEAL SPNEGO support provides single sign-on from Internet Explorer on Windows client workstations configured into an Active Directory domain.

When Active Directory is not the ISAM user registry, users must be replicated between the client Active Directory registry and the ISAM user registry.

Kerberos authentication is only possible with browsers and platforms that support the SPNEGO protocol. Client computers and browsers must be properly configured to enable Kerberos authentication. SPNEGO single sign-on to WebSEAL functions successfully with Chrome, Edge, Firefox, and Internet Explorer browsers. For additional configuration instructions, see the appropriate browser documentation or contact the support organization for the browser software.

Parent topic: Windows desktop single sign-on concepts