---
title: "Kerberos Authentication"
slug: "safran-project-integration-api-kerberos-authentication"
updated: 2024-09-04T13:27:38Z
published: 2024-09-04T13:27:38Z
canonical: "docs.safran.com/safran-project-integration-api-kerberos-authentication"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.safran.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Kerberos Authentication

## Kerberos Authentication

Using Kerberos authentication will depend on the Windows domain authentication process.

### Setup

1. Internet Information Service (IIS) Manager.
  1. In your IIS installation, locate and select the Safran Web API Site.
  2. Select the "Authentication" option.
    1. Set "Windows Authentication" = "Enabled"
    2. All other to "Disabled"
    3. ![API Security Kerberos Windows Authentication](https://cdn.document360.io/50ded092-9d8c-4eb9-8e6f-51ce28d62ac8/Images/Documentation/API%20Security%20Kerberos%20Windows%20Authentication.png)
2. Within the **appsettings.json** file found in your file folder.
  1. Ensure the "**authentication type**" setting is set to "**Kerberos**".
  2. See the [Authentification Type](/docs/safran-project-integration-api-kerberos-authentication#Authentification-type) below.
3. Windows users
  1. Place your organisation's users who will get access to the Safran API into the Windows group "**SafranWebApiUsersGroup**". Should you use a group other than "**SafranWebApiUsersGroup**", remember to update the application setting for the IIS.
  2. See the [Windows-user](/docs/safran-project-integration-api-kerberos-authentication#Windows-user) below.
  3. The user who is a member of the specified group or any of that group's nested groups will be granted access.
  4. In the following Active Directory structure sample:
    1. Specifying "SafranWebApiUsersGroup" in "SafranWebApiUsers" will allow all 4 API users access.
    2. Specifying "NestedGroupLevel-2" in "SafranWebApiUsers" will only allow "APIUser2.1" access.
    3. See the [Nested Group Levels](/docs/safran-project-integration-api-kerberos-authentication#Nested-Group-Levels) below.

#### Authentification Type

```
 "AppSettings": {
  "SafranWebApiAuthenticationType": "Kerberos",
  ...
}
```

#### Windows user

```
"AppSettings": {
  "SafranWebApiUsers": "SafranWebApiUsers",
  ...
}
```

#### Nested Group Levels

```
SafranWebApiUsersGroup
   APIUser0.1
   NestedGroupLevel-1
         APIUser1.1
         APIUser1.2
      NestedGroupLevel-2
         APIUser2.1
```