---
title: Configuring Active Directory domains or Kerberos realms
description: You can configure an Active Directory (AD) domain or Kerberos realm to authenticate users.
component: pingfederate
version: 13.1
page_id: pingfederate:administrators_reference_guide:help_kerberosrealmstasklet_kerberosrealmsstate
canonical_url: https://docs.pingidentity.com/pingfederate/13.1/administrators_reference_guide/help_kerberosrealmstasklet_kerberosrealmsstate.html
llms_txt: https://docs.pingidentity.com/pingfederate/llms.txt
docs_for_agents: https://developer.pingidentity.com/build-with-ai/docs-for-agents.md
revdate: July 5, 2022
section_ids:
  steps: Steps
---

# Configuring Active Directory domains or Kerberos realms

You can configure an Active Directory (AD) domain or Kerberos realm to authenticate users.

## Steps

1. Go to **System > Data & Credential Stores > Active Directory Domains/Kerberos Realms**.

2. From the **Manage AD Domains/Kerberos Realms** window, configure the AD environment to integrate with PingFederate. For more information, see [Configuring the Active Directory environment](pf_configuring_active_directory_environment.html).

3. Click **Add Domain/Realm** to create an AD domain.

   |   |                                                                                                                                                                               |
   | - | ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
   |   | Do not configure subdomains if the parent domain in the same forest is already configured. For more information, see [Multiple-domain support](pf_mutliple_domain_supp.html). |

   |   |                                                                                                                                            |
   | - | ------------------------------------------------------------------------------------------------------------------------------------------ |
   |   | Click the name of an existing domain to edit it. Use the **Delete** and **Undelete** links to remove a domain or cancel a removal request. |