Integrated Windows Authentication (Kerobos)

Question

This is pretty low-priority and I don't know if it's feasible, but it would be nice if dbFront could automatically pull the logged-in Windows user credentials and sign in automatically, instead of having to login twice (first to Windows, then dbFront)

Comments

It's extremely important for classical Windows corporate domains without Azure! Thanks for planning this feature!

Answer 1

dbFront supports Integrated Windows Authentication as of dbFront 1.4.5.2124. The configuration is very straightforward.

a) First adjust the Authentication on IIS.

1. Open Internet Information Services (IIS) Manager
2. Select your site, e.g. "Default Web Site"
3. Click on "Authentication"
4. Disable "Anonymous Authentication"
5. Enable "Windows Authentication"

b) In dbFront enable the SSO Windows Identity based Single-Sign-On (SSO)

1. Open the dbFront Settings [Help]/[Settings] in dbFront
2. Select the Single-Sign-On tab.
3. Select "Windows Identity (IIS)
4. Verify that your username is found, and click save.

And it should just work. dbFront won't allow you to save the new configuration if the IIS Authentication was not first configured.

NOTE: This is an Enterprise feature.