Windows Authentication

[bkrasnof]

Hi, I've configured my Vault server to use Windows Authentication for the Vault users.

I'm running the client for the first time, and I'm surprised I have to hardcode my username and password in there. Is there a way it would detect my credentials and pass it through to the Vault server?

thanks,
Bruce K.

[lbauer]

Active Directory authentication doesn't enable an auto-login. Vault uses AD only as a password verification mechanism. Whatever password is entered in the Vault login dialog is forwarded to AD to reject or accept. This was implemented as a way for admins to utilise AD to enforce password expiration and password toughness.

You can use a login Profile to set up auto-login.

[bkrasnof]

Hi Linda,

Thanks for the information. That's good to know. I'll definitely get a SSL certificate then for the Vault server, I'm assuming if I don't use SSL the passwords will go in the clear.

-Bruce

[lbauer]

I'm assuming if I don't use SSL the passwords will go in the clear.

Actually, that's not the case. Vault doesn't send passwords in the clear, even if you're not using SSL -- they're hashed.