Hi,
I've managed to integrate some webapps with FreeIPA nicely, both using
mod_auth_gssapi and Ipsilon. Both work great on computers joined to
FreeIPA, I am signed in automatically without typing my password.
Can a similar experience be achieved on Firefox Android? I can log in
putting my password, but both methods require to type in my password (and
quite often- when Firefox is restarted I get prompted the password again
and again).
I was thinking of using the FreeIPA CA to create a user/device certificate,
but I see several drawbacks:
* It is a bit clunky to set up. Maybe there's some OSS MDM I could use to
push the certificate...
* Ipsilon does not support it- so I should do it all in Apache doing the
certificate authentication in addition to mod_auth_gssapi
Maybe there are other methods? I see Keycloak has support for WebAuth...
but I've found Ipsilon much easier to set up...
Cheers,
Álex
--
___
{~._.~}
( Y )
()~*~() mail: alex at corcoles dot net
(_)-(_) http://alex.corcoles.net/
_______________________________________________
FreeIPA-users mailing list -- [email protected]
To unsubscribe send an email to [email protected]
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/[email protected]
