Central Authentication

Active Directory

Active Directory (AD) is a directory service that Microsoft developed for the Windows systems. AD provides directory-based identity-related services using standards such as LDAP, Kerberos, and DNS.

Kerberos

Kerberos is a network authentication protocol designed to provide strong authentication for client/server applications by using secret-key cryptography. The Kerberos protocol uses strong cryptography so that clients and servers can prove their identity to each other across the network.
 
Fermilab specific configuration files are available here.

LDAP

The Lightweight Directory Access Protocol (LDAP) is an open, vendor-neutral, industry standard application protocol for accessing and maintaining distributed directory information services over an Internet Protocol (IP) network.

Eduroam

Eduroam is a federated authentication service that allows participating institutions to provide access to their wireless networks to users from other Eduroam participating institutions. Individuals use their home institution credentials to access the network.

Federation

Fermilab is a member of the InCommon Federation. Single Sign On (SSO) services are available for use with InCommon members and Fermi applications.

Staff and users can see what SSO groups they are in here

Multi-Factor

Multi-factor authentication (MFA) is a method of confirming a user's claimed identity in which two or more mechanisms such as knowledge, possession and inherence are used.