Spotfire® Server and Environment - Installation and Administration

Single sign-on authentication methods

Spotfire Server can be integrated with certain single sign-on systems that are used in enterprise environments.

Spotfire Server can use the Kerberos single sign-on authentication method, where the identity information stored within the user's current Windows session is reused to authenticate the user on the server. Thus, when using this authentication method, users are never prompted for user name or password when they log in to Spotfire Server. The Kerberos authentication is a protocol within Integrated Windows Authentication.

Spotfire Server can also authenticate users based on X.509 certificates. This requires the server to be configured for mutual TLS, meaning HTTPS with X.509 client certificates.