Using the F5 BIG-IP to provide Kerberos authentication with end-user logons

Access Policy Manager® (APM®) provides an alternative to a form-based login authentication method. This alternative method uses a browser login box that is triggered by an HTTP 401 response to collect credentials. A SPNEGO/Kerberos or basic authentication challenge can generate a HTTP 401 response.
This option is useful when a user is already logged in to the local domain and you want to avoid submitting an APM HTTP form for collecting user credentials. The browser automatically submits credentials to the server and bypasses the login box to collect the credentials again.
techdocs.f5.co...

[@robinmordasiewicz]

As usual, fantastic content. And hey, is that Steve down in the corner !!!!

[@donamato]

top video ! thanks

[@inamrajput]

Hi Steve Great video. I have a question. In my scenario, my domain is mydomain.com and I want SSO for example.com. My client machine is part of mydomain.com and the site is on the internet. My question is: What should be my ktpass syntax for this kind of requirement? Like, should it be: 1- HTTP/[e-mail] -mapuser [e-mail]? OR 2- HTTP/[e-mail] -mapuser [e-mail]? Please advise.