Hi experts,
I have a question regarding SSO solution design and would like to hear the experts opinion from you. At my current customer we are planning to implement SSO for their internal users. All users are domain users so we decide to use Kerberos for SAP GUI based SSO. Additionally the customer has an IDP in order to SSO to SuccessFactor using SAML 2.0. So far so good. My question is on browser based access. Based on the existing infrastructure both Kerberos and SAML 2.0 would be supported for the Web browser based accesses. I am struggling at choosing one from them. Kerberos looks more straightforward. But SAML 2.0 sounds more suitable for Web SSO. Would someone share me your opinion which is better and why?
Note that all accesses are from intranet. Internet access is not considered here.
Much appreciated in advance and best regards
Xuan