Okta, Inc.
DUAL DOMAIN CLOUD KERBEROS AUTHENTICATION

Abstract:

Authorizing access to a web domain involves a server device receiving, from a browser of a computing device, a request to access a web domain. The server device sends a web page to the browser of the computing device. The web page includes a redirect script that redirects the browser to a particular companion domain of the web domain, wherein the particular companion domain comprises a domain name system (DNS) zone file comprising an ALIAS record for the particular companion domain. The server device sends to the browser an authentication challenge for access to the web domain. The server device receives a Kerberos service ticket from the browser of the computing device. The server device provides the browser with access to the web page.