This site requires JavaScript to be enabled

Notifications

683 views

4.0 - Updated on 2021-02-12 by Carlos Salazar

3.0 - Updated on 2020-11-12 by Marcia Teckenbrock

2.0 - Updated on 2020-11-12 by Marcia Teckenbrock

1.0 - Authored on 2018-08-21 by Olga Terlyga

How to choose an authentication option on the Fermilab single sign-on (SSO) page

 

Intended for:

Fermilab single sign-on (SSO) users.

 


Scenario/Use case:

This article describes how you can choose an appropriate authentication option on the Fermilab single sign-on (SSO) page.

 


Instructions:

From the drop-down list select the authentication mechanism you would like to use. To help you choose, see the description for each option below. 

 

Notes:

 

A. Services Username and Password - If you choose this option, you will be presented with the Username and Password login page. Enter your SERVICES username and password to log in.

B. On Site Fermi Windows System - This option will allow you to log in without entering an additional password, if you are on site (or logged in to VPN) and using a Windows computer in the FERMI domain (this includes the vast majority of Fermilab-owned Windows computers) and use an Internet Explorer, Edge or Chrome browser.


C. Kerberos (FERMI or FNAL)
- This option will allow you to log in without entering an additional password, if you are on site (or logged in to VPN) and your browser is configured for Kerberos authetication and you have a valid Kerberos ticket from either the FNAL.GOV realm or the FERMI.WIN.FNAL.GOV realm. This option can be used with all browsers on Mac and Linux computers, as well as Firefox browser on Windows computers that are not in the FERMI domain.

D. Fermilab CILogon certificate - This option will allow you to log in without entering an additional password, if you have a CILogon Silver CA certificate that was obtained with Fermilab credentials imported in your browser. If you have more than one certificate imported in your browser, make sure to select your Fermilab CILogon Silver CA certificate when prompted. This option works with any browser on any operating system, including mobile.

 


See Also: