Cloud Pak for Business Automation

Greetings

Currently we are windows servers hosting BAW with external CPE and ICN. Kerberos is the primary authentication mechanism also providing SSO capabilities on top of Microsoft AD. Now are planning for ICP4BA 23.0.2 on-prem. Can someone suggest what are the options for achieving SSO in this scenario and how configuration should be handled with IM component of Foundation Services ?

Thanks

Hi Lakshya,

I strongly recommend moving to CP4BA 24.0.0 instead of 23.0.2. 24.0.0 has a much longer support lifecycle, whereas 23.0.2 already no longer receives regular updates.

Regarding SSO, the default assumption is that you 

1. connect CP4BA to an LDAP server for access to user and group data
2. for passwordless login, you delegate authentication to an identity provider using SAML or OpenID connect.

Your identity provider may in turn support SPNEGO (Kerberos for browser users).