Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm installing a bunch of web apps for the office, and one of the wants would be Kerberos-managed SSO.

Now, I have found some information on the matter, and I wondered, what browsers integrate Kerberos SSO?

Of course I could just use the underlying web app to authenticate in case of lack of Kerberos capability, which is exactly the plan, but I'd like to know which browsers would work for that, so I can plan ahead and decide if it's even worth it to do that, which I believe it would considering that one of the web apps I'm implementing will be an ERP.

share|improve this question
up vote 1 down vote accepted

Firefox natively supports GSSAPI authentication. See here for more information.

share|improve this answer
chrome can be configured to do GSSAPI authentication as well:… – n8whnp Jul 29 '11 at 21:35

If you are looking for a solution that will work across the systems you are using, mod_auth_krb5 and firefox will work for internal access, however I recommend using a slightly different solution: WebAuth from Stanford. It can use Kerberos + GSSAPI to login, but can will also allow browsers that don't support GSSAPI negotiation and let them login and have a SSO experiance as well:

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.