Configuring the Browser

Any client browser used in the intranet must be configured to work with the Kerberos Domain Controller.

To Configure Microsoft Internet Explorer

1. In the Tool menu, go to Internet Options > Security.

2. Choose Local Intranet, and then click Site.

3. Mark the “Automatically detect intra network” checkbox, and then click Advanced.

4. Add the OpenSSO Enterprise URL to the Websites list if the URL is not already on the list.

   Example: http:/openSSOhost.example.com

   For pre-6.0 Internet Explorer versions, be sure the Identity Server is in the browser's intranet zone and that native Windows Authentication is enabled. For more information, see Enabling Windows Authentication.

To Configure Mozilla or FireFox

1. Open the Firefox browser, and enter about:config in the address bar.

   This will display a large number of configuration entries, called Preference Names, for Firefox .

2. Double-click the Preference Name network.negotiate-auth.trusted-uris.

3. Enter http://, https://.

To Configure Apple Safari

Safari has built-in native support for Kerberos single sign on and no configuration is needed.