My Oracle Support Banner

How To Configure Kerberos SSO Authentication for the Webcenter Content UI (Doc ID 2003345.1)

Last updated on DECEMBER 28, 2022

Applies to:

Oracle WebCenter Content - Version and later
Information in this document applies to any platform.


 How to configure WNA, Windows Native Authentication Single Sign On utilizing Kerberos when the Webcenter ADF Content UI.


To view full details, sign in with your My Oracle Support account.

Don't have a My Oracle Support account? Click to get started!

In this Document
 The primary considerations for configuring kerberos
 The Steps to configure kerberos for the Content UI domain
 A. Configure the Content UI domain, part 1
 B. Create the Active Directory host account user
 C. Generate the kerberos keytab using ktpass
 D. If AES 256 encryption will be utilized, update the default JDK Security Policy Files
 E. Copy the keytab file to the UI system
 F. Edit the krb5.conf or krb5.ini file on the UI system
 G. Test the validity of the SPN and keytab files
 H. Configure the WLS UI Domain, part 2
 I. For Windows 7 and newer clients, enable kerberos encryption
 J. Configure the web browser
 If the WNA is not working
 The kerberos configuration files
 Log file entries
 A network sniff trace
 Using a WLS Identity Store other than Active Directory for user authorization
 Accessing the UI on browser clients outside of the Windows Domain

My Oracle Support provides customers with access to over a million knowledge articles and a vibrant support community of peers and Oracle experts.