Enabling Kerberos authentication - PingOne Cloud Platform - PingOne

You can enable Kerberos authentication to provide end-users with a seamless sign-on experience if the Microsoft 365 users are migrated into PingOne from Active Directory (AD)Active Directory (AD)AD A directory service for Windows domain networks, included in most Windows Server operation systems. through the LDAP Gateway and if your Microsoft 365 applications support the Active Profile sign in option.

You must have:

• An LDAP Gateway configuration with Kerberos authentication enabled
• At least one User Type configured
• A configured SPN in AD
• An LDAP Gateway deployed in the network where it can reach the targeted domain controllers

1. In PingOne, go to Applications > Applications.
2. Browse or search for the Microsoft 365 application and click the Microsoft 365 entry to open the details panel.
3. Click Enable Advanced Configuration and click Enable when prompted.
4. In the Configuration tab, click the Pencil icon.
5. Select the Enable Kerberos Authentication check box.
6. Click +Add Gateway User Type.
7. Select a Gateway and a User Type.
8. Click Save.