[keycloak-user] GSS Credential delegation works for Internet Explorer but not for Chrome?

[Chris Smith]

I was able to make Chrome delegate a GSS Credential.
In Chrome for Windows, it required using the windows registry editor.
http://dev.chromium.org/administrators/policy-list-3#AuthNegotiateDelegateWhitelist


-----Original Message-----
From: keycloak-user-bounces at lists.jboss.org <keycloak-user-bounces at lists.jboss.org> On Behalf Of Chris Smith
Sent: Thursday, January 31, 2019 2:11 AM
To: keycloak-user at lists.jboss.org
Subject: [keycloak-user] GSS Credential delegation works for Internet Explorer but not for Chrome?

I have Keycloak setup to authenticate to an Active Directory domain using LDAP/Kerberos

I have set Windows Internet options for SSO

Both Internet Explorer and Chrome successfully perform Authentication.

I have a requirement for a Delegated GSSCredential and have configured Keycloak and my Active Directory domain controller to perform this task

When I run my web app using  Internet Explorer as my browser, in the servlet I successfully get a Delegated GSSCredential from the Access Token.

When I run my web app using  Chrome as my browser, in the servlet I fail to get a Delegated GSSCredential from the Access Token.

Why the difference and what do I need to set to allow Chrome to be used as a fully supported browser?

_______________________________________________
keycloak-user mailing list
keycloak-user at lists.jboss.org
https://lists.jboss.org/mailman/listinfo/keycloak-user