Add a keytab for Kerberos-constrained delegation

How to

  1. On a computer with an installed Kerberos client, create a keytab file and save it on the system which you use to access EAA.
  2. Log in to the Enterprise Application Access (EAA) Management Portal.
  3. From the top menu bar, click System > Keytabs > Add Keytab.
  4. Enter the information for the keytab.
    • Name. A unique identifier for the keytab.
    • Realm. The service domain that your applications belong to. For example, domain.company.com.
    • Keytab type. Select Kerberos delegation
  5. To upload a keytab file, click Choose File.
  6. Select the keytab file from your system.
  7. Click Save.
    The keytab appears as a card on the Keytabs page.

What you should see

The keytab deploys to all connectors in the Active Directory (AD) configuration. EAA selects the AD for deployment based on the user credentials when adding the keytab.