How to set up Kerberos Authentication – Introduction

Introduction

This article explains the basics of Kerberos authentication support in Easy8. Since version 2018.1.3 (platform 05.02), Easy Software provides Kerberos as a premium service for secure user login. Understanding how Kerberos works and what is required for setup helps administrators plan their Single Sign-On (SSO) environment effectively.

Target Audience

Administrator

Understanding Kerberos Authentication Setup

Definition

Kerberos is a secure method for authenticating users in a network. It allows users to log in once and gain access to different systems without being asked to log in again.

In Easy8:

Kerberos is part of general SSO authentication settings.
It is available in:
- Version 10: Administration >> Settings >> Authentication
- Version 11: Administration >> Easy SSO
Provided as a premium feature and may include a one-time fee.

How It Works

With the configuration, users log in using a Kerberos format:

manager/admin@EASYPROJECT.COM

Where EASYPROJECT.COM is the Kerberos realm name.

The setup requires:

Easy8 application setup for Kerberos
Apache web server configuration (mandatory)
Collaboration with Easy Software experts for secure implementation

Although the application-side configuration is simple, the major part of the work is done on the server side, which includes Apache and environment setup. This should be handled by experienced professionals.

Examples

A user in your company logs in using their corporate credentials once and gains access to Easy8 without another login prompt.
The Kerberos realm and Apache modules are already configured by your system administrator or Easy Software team.

Common Misconceptions

Misconception	Clarification
The Kerberos setup is fully automatic after enabling it in the UI.	Most of the setup is done on the server level and may require expert configuration, especially of Apache.
It is safe to configure Kerberos without experience.	Server-side SSO setup must be done carefully to avoid security issues. Easy Software is not responsible for incorrect custom setups.

Conclusion

Kerberos authentication allows secure and seamless SSO login to Easy8. While enabling it is easy within the app settings, the critical server-side configuration must be handled by professionals. Contact Easy Software support or your account manager to plan the integration safely.