Kerberos authschame to fallback to auth scheme other than html forms

Products

• SITEMINDER
• CA Single Sign On Agents (SiteMinder)
• CA Single Sign On Federation (SiteMinder)
• CA Single Sign On Secure Proxy Server (SiteMinder)

Issue/Introduction

Can Kerberos authentication fallback to an auth scheme other than Forms?

Environment

Release : All

Resolution

While the HTML Forms auth scheme is the only supported scheme for fallback from Kerberos, you can leverage the Forms auth scheme to redirect the user to any URL by making the desired URL the Target of the Forms auth scheme.   Upon redirecting the user, the Web Agent will add SM query parameters to the Target URL, but the web agent does not care what type of resource the user is redirected to - the agent issues the redirect and does not track the request, so you can leverage the Forms auth scheme to redirect to any resource - this redirection isn't limited to a login form, so any auth scheme that can be initiated via URL request can be initiated this way.