How to integrate OAM with windows natively

The objective of this specific integration is to allow users to login to their work stations and be immediately signed in to various connected web applications. This is a step up from last week’s integration because a user does not need to enter any more credentials to be logged in. This is a great way of having users use internal resources without having to login again. There is only one catch, Kerberos authentication only works if the user is able to communicate with port 88 on the domain controller. If this is possible the user is able to ‘login’ to the domain and not the cached credentials store within windows itself. This integration will use a way to check if you are already authenticated to the domain controller, so if you cannot reach the domain controller, you cannot do Kerberos authentication. In that case the user will still be presented with a login screen by default.

Read more at – How to integrate OAM with windows natively