Hello,
I have not found the settings for modifying the SSO Kerberos cypher protocol.
Kerberos support multiples cypher algorithms like :
- AES256_CTS_HMAC_SHA1_96
- AES256_CTS_HMAC_SHA1_96
- RC4_HMAC
- DES
But when the user wants to connect with an account member of the "Protected Users" Active Directory group he can't because the "Protected Users" group require the usage of AES cypher protocol for Kerberos exchange.
https://docs.microsoft.com/en-us/windows-server/security/credentials-protection-and-management/prote...
So do you know a way to modify the Kerberos settings to support AES cypher in Pulse Secure platform?