Chrome and Kerberos Single Sign On

tegelaar
New Contributor

Hello - I am configuring Chrome to use kerberos to single sign on to my workplace home page but it isn't working.
We do not want to use MCX due to previous issues using them in our environment.

I have set the whitelist domains using:
sudo defaults write /Library/Preferences/com.google.Chrome.plist AuthNegotiateDelegateWhitelist '.domain.intra'
sudo defaults write /Library/Preferences/com.google.Chrome.plist AuthServerWhitelist '
.domain.intra'

However loading the homepage still requests credentials. In Firefox, everything works fine once I set the domains.

Any idea why it doesn't work? Am I missing a setting? Ive tried forcing certain authentications too but then the page will not load at all.

Thanks for any help..

40 REPLIES 40

msergi
New Contributor III

yes big thank you @ncworster and others in the thread from august 2023,  I have been fighting with kerberos auth for a few specific things in chrome for a while now, this solved the problem. Config profile -> Application & custom settings -> Upload > com.google.chrome preference domain> copy plist > scope.