Import
a
Kerberos Keytab
file.
When prompted,
Browse
for the keytab file,
and then click
OK
. During authentication,
the endpoint first attempts to establish SSO using the keytab. If
it is successful, and the user attempting access is in the
Allow List
,
authentication succeeds immediately. Otherwise, the authentication
process falls back to manual (username/password) authentication
using the specified authentication
Type
.
The
Type
does not have to be Kerberos. To
change this behavior so users can authenticate using only Kerberos,
set
Use Default Authentication on Kerberos Authentication
Failure
to
No
in the GlobalProtect
portal agent configuration.