To support Kerberos authentication, you must add two trusted URIs to end user browsers.
The purpose of two URIs is future proofing. Ping Identity will migrate its infrastructure in the coming months. Adding the second URI ensures that your configuration will continue to work after the migration.
Custom domains
If the environment is configured with a custom domain, auth.pingone.com and kerberos.pingone.com are irrelevant. Instead, add the custom domain as the trusted URI.
Browser URI reference
When configuring end user browsers, use the following trusted URI values for the various PingOne regions.
| Region | URI 1 | URI 2 |
|---|---|---|
North America | auth.pingone.com | kerberos.pingone.com |
Asia Pacific | auth.pingone.asia | kerberos.pingone.asia |
Canada | auth.pingone.ca | kerberos.pingone.ca |
Europe | auth.pingone.eu | kerberos.pingone.eu |