In reply to Ved Agrawal.

Hello Ved,
Thank you for taking the time to comment. Implementing Web Single Sign-On is a complex topic. However I would not say that the Identities service prevents configuring Web Single Sign-On. You need to remember that Identities needs to correctly identify the end-user in the configured LDAP provider. This means for something like Kerberos or Integrated Windows Authentication (IWA) it is pretty straight forward. Since you have Active Directory to enable Kerberos you can configure Identities against the same Active Directory and every works well. If you are instead looking at leveraging Federated Identity providers through SAML v2 or OAuth/OpenID Connect, you'll need to put more thought into the LDAP provider used by Identities. However, again there are options that make this setup easy - for example Active Directory Federation Services will provide both SAML v2 and LDAP so you'll get both.

I hope that this information has helped - please reach out through Technical Support if you have further detailed questions.

Thank you for your time.

Stuart