Single sign-on authentication methods
Spotfire Server can be integrated with certain single sign-on systems that are used in enterprise environments.
Spotfire Server can use the Kerberos single sign-on authentication method, where the identity information stored within the user's current Windows session is reused to authenticate the user on the server. Thus, when using this authentication method, users are never prompted for user name or password when they log in to Spotfire Server. The Kerberos authentication is a protocol within Integrated Windows Authentication.
Spotfire Server can also authenticate users based on X.509 certificates. This requires the server to be configured for mutual TLS, meaning HTTPS with X.509 client certificates.
- Web authentication
When using web authentication, a web browser will be displayed for all users, allowing them to log in to Spotfire using an external authentication provider, such as Google. - Authentication using X.509 client certificates
When Spotfire Server is set up with HTTPS and is configured to require client certificates, the information from the certificates can also be used for login purposes. - Kerberos authentication
Kerberos is a protocol that allows for secure authentication even over unsecure networks. It can be difficult to set up, but after it is fully working you have a very secure authentication system with the benefits of single sign-on. - Configuring anonymous authentication
Anonymous authentication allows anyone to access public information that is available for viewing on the Spotfire web client without prompting them for a user name or password.
- Web authentication
When using web authentication, a web browser will be displayed for all users, allowing them to log in to Spotfire using an external authentication provider, such as Google. - Authentication using X.509 client certificates
When Spotfire Server is set up with HTTPS and is configured to require client certificates, the information from the certificates can also be used for login purposes. - Kerberos authentication
Kerberos is a protocol that allows for secure authentication even over unsecure networks. It can be difficult to set up, but after it is fully working you have a very secure authentication system with the benefits of single sign-on. - Configuring anonymous authentication
Anonymous authentication allows anyone to access public information that is available for viewing on the Spotfire web client without prompting them for a user name or password.