7.1

e In the Re-Authenticate after value text box, enter the number of hours after which users must
authenticate again.
f (Optional) Create a custom access denied message that displays when user authentication fails. You
can use up to 4000 characters, which is about 650 words. If you want to send users to another page,
in the Link URL text box, add the URL link. In the Link text text box, enter the text that displays
for the link. If you leave this text box blank, the word Continue displays.
g Click Save.
4 Click Save.
5 Click Save and click Save again on the Policy page.
Configuring Kerberos for Directories Management
Kerberos authentication provides users who are successfully signed in to their Active Directory domain to
access their apps portal without additional credential prompts. You enable Windows authentication to allow
the Kerberos protocol to secure interactions between users' browsers and the Directories Management
service. You do not need to directly congure Active Directory to make Kerberos function with your
deployment.
Currently, interactions between a user's browser and the service are authenticated by Kerberos on the
Windows operating systems only. Accessing the service from other operating systems does not take
advantage of Kerberos authentication.
n
Congure Kerberos Authentication on page 115
To congure the Directories Management service to provide Kerberos authentication, you must join to
the domain and enable Kerberos authentication on the Directories Management connector.
n
Congure Internet Explorer to Access the Web Interface on page 116
You must congure the Internet Explorer browser if Kerberos is congured for your deployment and
if you want to grant users access to the Web interface using Internet Explorer.
n
Congure Firefox to Access the Web Interface on page 117
You must congure the Firefox browser if Kerberos is congured for your deployment and you want
to grant users access to the Web interface using Firefox.
n
Congure the Chrome Browser to Access the Web Interface on page 117
You must congure the Chrome browser if Kerberos is congured for your deployment and if you
want to grant users access to the Web interface using the Chrome browser.
Configuring vRealize Automation
114 VMware, Inc.