20 July 2015

Kerberos SSO for Google Chrome on Mac OS X

Normally Macs are better at doing this stuff, however.

To get Kerberos SSO (SPNEGO) authentication working on chrome you normally have to use command line parameters with the Chrome binary; which while certainly possible on macs can be done by creating a startup script.

A far simpler way is to issue the following commands from the command line:

$ defaults write com.google.Chrome AuthServerWhitelist “*.example.com”
$ defaults write com.google.Chrome AuthNegotiateDelegateWhitelist “*.example.com

Thanks to Jeff Geerling for this one.

No comments: