Focus

Prisma Access

Kerberos Authentication for Explicit Proxy Deployments

Table of Contents

Filter

Expand All | Collapse All

Prisma Access Docs

Administration
Version
- Prisma Access China
- 4.0 & Later
- 3.2 Preferred and Innovation
- 3.1 Preferred and Innovation
- 3.0 Preferred and Innovation
- 2.2 Preferred
Integrations
Incidents & Alerts
Release Notes
Version
- 5.0 Preferred and Innovation
- 4.2 Preferred
- 4.1 Preferred
- 4.0 Preferred
- 3.2 Preferred and Innovation
- 3.1 Preferred and Innovation
- 3.0 Preferred and Innovation
- 2.2 Preferred

App-Based Office 365 Integration with Explicit Proxy

Requirements and Recommendations for Deploying Kerberos for Explicit Proxy Deployments

Kerberos Authentication for Explicit Proxy Deployments

Where Can I Use This?	What Do I Need?
`Prisma Access (Managed by Strata Cloud Manager)` `Prisma Access (Managed by Panorama)`	`Prisma Access` license

Prisma Access Mobile—Explicit Proxy deployments support Kerberos authentication. If you have servers, IoT devices, or headless machines that cannot authenticate using SAML, you can use Kerberos authentication instead.

If your deployment uses both SAML and Kerberos for authentication, you can configure both authentication types in a single Explicit Proxy deployment. In this way, you can authenticate mobile users with SAML while authenticating servers, IoT devices or headless machines with Kerberos. Prisma Access Explicit Proxy processes the authentication depending on the port used for the authentication traffic:

If the authentication traffic uses port 8080, Explicit Proxy uses SAML authentication.

If the authentication traffic uses port 8081, Explicit Proxy uses Kerberos authentication.

If only one port is configured, the port that is not configured uses the same authentication profile as the configured port.

Kerberos SSO is available only for endpoints and systems that have access to your Kerberos infrastructure. Endpoints and systems without access to the Kerberos infrastructure must use SAML SSO.

Requirements and Recommendations for Deploying Kerberos for Explicit Proxy Deployments

Create a Kerberos Keytab

Configure Kerberos Authentication for Explicit Proxy Deployments

App-Based Office 365 Integration with Explicit Proxy

Requirements and Recommendations for Deploying Kerberos for Explicit Proxy Deployments

Prisma Access Docs

Kerberos Authentication for Explicit Proxy Deployments

Prisma Access Docs

Kerberos Authentication for Explicit Proxy Deployments

Recommended For You

Activation & Onboarding

SASE

Cloud-Delivered Security Services

Network Security

Endpoints

Visibility & Monitoring

Best Practices

Experts Corner