How to choose an authentication option on the Fermilab single sign-on (SSO) page
Intended for:
Fermilab single sign-on (SSO) users
Scenario/Use case:
This article describes how you can choose an appropriate authentication option on the Fermilab single sign-on (SSO) page.
Instructions:
From the drop-down list select the authentication mechanism you would like to use. To help you choose, see the description for each option below.
Notes:
- If you check the Remember selection box, you will not be presented with the drop-down list the next time you log in. The setting will only be in effect for that browser on that machine. If you want to clear your remembered selection, you need to clear cookies.
- If the method you chose fails, you will be redirected to the Services Username and Password login page. If you checked Remember selection, you will not be presented with the drop-down list again.
A. Services Username and Password - If you choose this option, you will be presented with the Username and Password login page. Enter your SERVICES username and password to log in.
B. On Site Fermi Windows System - This option will allow you to log in without entering an additional password, if you are on site (or logged in to VPN) and using a Windows computer in the FERMI domain (this includes the vast majority of Fermilab-owned Windows computers) and use an Edge or Chrome browser.
C. Kerberos (FERMI or FNAL) - This option will allow you to log in without entering an additional password, if you are on site (or logged in to VPN) and your browser is configured for Kerberos authetication and you have a valid Kerberos ticket from either the FNAL.GOV realm or the FERMI.WIN.FNAL.GOV realm. This option can be used with all browsers on Mac and Linux computers, as well as Firefox browser on Windows computers that are not in the FERMI domain.
D. Fermilab CILogon certificate - This option will allow you to log in without entering an additional password, if you have a CILogon certificate that was obtained with Fermilab credentials. If you have more than one certificate imported in your browser, make sure to select your Fermilab CILogon certificate when prompted. (Note: CILogon Certificate Authority has been shut down. If you have an existing CILogon certificate, you can continue to use it until it expires, but you will not be able to obtain a new CILogon certificate.)