Forum Discussion

JoeTheFifth's avatar
JoeTheFifth
Icon for Altostratus rankAltostratus
Feb 13, 2018

APM SSO Credential Mapping Get Result

I'm working on a constrained delegation setup. I use the sso credential mapping step in my policy. Everything is working fine. Now I need to add a step to check if the kerberos auth (constrained delegation) is successful or not. I checked the logs and couldn't find a variable which is set after the kerb tickets are obtained and the sso ends. Any hints on how to acheive this? Thanks.

 

1 Reply

  • There is no variable to check if the sso process has been performed successfully, it is more a best effort process so to speak. If for whatever reason sso don’t work APM will forward the backend logon form, pop up window, etc to the client.

     

    If you need to check the sso process you can enable debug level logging. You can do that under system, logging configuration in the access policy section.