[Fed-Talk] Re: "Authentication" < > "SSO"
[Fed-Talk] Re: "Authentication" < > "SSO"
- Subject: [Fed-Talk] Re: "Authentication" < > "SSO"
- From: "Timothy J. Miller" <email@hidden>
- Date: Mon, 29 Dec 2008 12:50:05 -0600
Shawn A. Geddis wrote:
I emphasized *Authentication* .... same I have said for a couple
years now...
"Authentication" < > "SSO" (for those not familiar, SSO
is Single Sign-On)
And it's as much splitting hairs now as it was then. :)
AD is an Apple-supported directory service. Authentication to AD
requires Kerberos. Kerberos with smartcards requires PKINIT. PKINIT
isn't supported in OS X's version of MIT Kerberos. Therefore smartcards
aren't integrated into *every* supported directory service under OS X.
The fact that authentication via AD as a directory service also nets you
a ticket you can use to authenticate to other network services (thus,
SSO) is immaterial to that chain of logic.
-- Tim
Attachment:
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Fed-talk mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden