How to choose an authentication option on the Fermilab single sign-on (SSO) page
Fermilab single sign-on (SSO) users.
This article describes how you can choose an appropriate authentication option on the Fermilab single sign-on (SSO) page.
From the drop-down list select the authentication mechanism you would like to use. To help you choose, see the description for each option below.
- If you check the Remember selection box, you will not be presented with the drop-down list the next time you log in. The setting will only be in effect for that browser on that machine. If you would like to clear your remembered selection, you need to clear cookies.
- If the method you chose fails, you will be redirected to the Services Username and Password login page. If you checked Remember selection, you will not be presented with the drop-down list again.
A. Services Username and Password - If you choose this option, you will be presented with the Username and Password login page. Enter your SERVICES username and password to log in.
B. On Site Fermi Windows System - This option will allow you to log in without entering an additional password, if you are on site (or logged in to VPN) and using a Windows computer in the FERMI domain (this includes the vast majority of Fermilab-owned Windows computers) and use an Internet Explorer, Edge or Chrome browser.
C. Kerberos (FERMI or FNAL) - This option will allow you to log in without entering an additional password, if you are on site (or logged in to VPN) and your browser is configured for Kerberos authetication and you have a valid Kerberos ticket from either the FNAL.GOV realm or the FERMI.WIN.FNAL.GOV realm. This option can be used with all browsers on Mac and Linux computers, as well as Firefox browser on Windows computers that are not in the FERMI domain.
D. Fermilab CILogon certificate - This option will allow you to log in without entering an additional password, if you have a CILogon Silver CA certificate that was obtained with Fermilab credentials imported in your browser. If you have more than one certificate imported in your browser, make sure to select your Fermilab CILogon Silver CA certificate when prompted. This option works with any browser on any operating system, including mobile.