Document toolboxDocument toolbox

(12.2.1-en) Active Directory/Kerberos

Owned by Emese Pogany
Sep 04, 2023
2 min read

This article shows how to enable local login to the device via the Kerberos protocol in IGEL OS.

Active Directory/Kerberos must be configured as a prerequisite, see (12.2.1-en) Active Directory/Kerberos 1.



Menu path: Security > Logon > Active Directory/Kerberos





The login can be used for single sign-on in a number of session types (ICA, RDP).



Login to Active Directory domain

☑ You can log in to the device via Active Directory.

☐ You cannot log in to the device via Active Directory. (Default)

Login Methods

Explicit

☑ You can log in with a user name and password. (Default)

☐ You cannot log in with a user name and password. If logging in with a smartcard is set up, you can log in with a smartcard.



Remember last user name

☑ The login dialog will be pre-populated with the last user name that logged on. Explicit must be enabled for this.

☐ The login dialog will not be pre-populated. (Default)



Smartcard

☑ You can log in using a smartcard.

☐ You cannot log in using a smartcard. (Default)



Smartcard removal action 

Specifies what action is performed when the smartcard via which the user is logged in is removed.
Possible actions:

  • Log out: The user is logged out from the device. (Default)

  • Lock device: The screen is locked.



If the login method is configured and the Allow system logoff option is enabled under System > Power Options > Shutdown, the user can log off the device through the shutdown menu. For information on how to access the shutdown menu, see (12.2.1-en) Commands. For information on how to configure the shutdown menu, see (12.2.1-en) Shutdown.