Views:

Question:
How do you configure DocuWare with Kerberos Authentication in versions 7.4 and greater?


Answer:
In order to configure DocuWare with Kerberos authentication, please complete the following,

  1. Go to IIS Manager.
  2. In the Application Pools, find "DocuWare Platform Services App Pool", "DocuWare Platform Settings App Pool," and "DocuWare Identity App Pool"


     
  3. Right-click and select "Advanced Settings".  Find Identity and change the value to "LocalSystem" for each of the specified App Pools.
  4. In IIS, navigate to Sites >Default Web Site >DocuWare >Identity (Where DocuWare resides may differ), then open Authentication.

     
  5. After you open Authentication, enable Windows Authentication and Disable all other authentication methods.
  6. Right-click "Windows Authentication" and select “Providers
  7. From the list of Available Providers, select “Negotiate:Kerberos” and remove the rest. You will be warned about Kernel mode. If you have it enabled, then save and right-click Windows Authentication again. This time select “Advanced Settings” and disable Kernel Mode (you can set “Extended Protection” to Off if you have trouble, but it could be a security risk.)
  8. Test Windows Login with Fiddler. Check the authentication tab to make sure DocuWare uses Kerberos.

KBA is applicable for On-premise Organizations ONLY.