300-715 · Question #139
A customer wants to set up the Sponsor portal and delegate the authentication flow to a third party for added security while using Kerberos. Which database should be used to accomplish this goal?
The correct answer is B. Active Directory. Kerberos is the native authentication protocol used by Microsoft Active Directory. When a customer wants to use Kerberos-based authentication for the ISE Sponsor portal - including delegating authentication to a trusted third party - Active Directory is the required identity…
Question
A customer wants to set up the Sponsor portal and delegate the authentication flow to a third party for added security while using Kerberos. Which database should be used to accomplish this goal?
Options
- ARSA Token Server
- BActive Directory
- CLocal Database
- DLDAP
How the community answered
(31 responses)- A3% (1)
- B94% (29)
- C3% (1)
Explanation
Kerberos is the native authentication protocol used by Microsoft Active Directory. When a customer wants to use Kerberos-based authentication for the ISE Sponsor portal - including delegating authentication to a trusted third party - Active Directory is the required identity source because it is the Kerberos Key Distribution Center (KDC). ISE supports Kerberos authentication for the Sponsor portal exclusively through Active Directory integration. RSA Token Server uses RADIUS/SecurID-based authentication, not Kerberos. The Local Database does not support Kerberos. LDAP can integrate with AD but does not natively support Kerberos ticket-based authentication in the way required for this delegation scenario.
Topics
Community Discussion
No community discussion yet for this question.