TIBCO Spotfire® Server and Environment - Installation and Administration

Single sign-on authentication methods

Spotfire Server can be integrated with certain single sign-on systems that are used in enterprise environments.

Spotfire Server can use the NTLM or Kerberos single sign-on authentication methods, where the identity information stored within the user's current Windows session is reused to authenticate the user on the server. Thus, when using these authentication methods, users are never prompted for user name or password when they log in to Spotfire Server. The Kerberos and NTLM authentication methods are commonly referred to as Integrated Windows Authentication.

Spotfire Server can also authenticate users based on X.509 certificates. This requires the server to be configured for mutual TLS, meaning HTTPS with X.509 client certificates.