52.9. Logging in to an IdM client via SSH as an external IdP user

Prerequisites

• You have created a reference to an external IdP in IdM. See Creating a reference to an external identity provider.
• You have associated an external IdP reference with the user account. See Enabling an IdM user to authenticate via an external IdP.

Verification

• Display your Kerberos ticket information and confirm that the line config: pa_type shows 152 for pre-authentication with an external IdP.

  [idm-user-with-external-idp@client ~]$ klist -C
  Ticket cache: KCM:0:58420
  Default principal: idm-user-with-external-idp@IDM.EXAMPLE.COM
  
  Valid starting     Expires            Service principal
  05/09/22 07:48:23  05/10/22 07:03:07  krbtgt/IDM.EXAMPLE.COM@IDM.EXAMPLE.COM
  config: fast_avail(krbtgt/IDM.EXAMPLE.COM@IDM.EXAMPLE.COM) = yes
  08/17/2022 20:22:45  08/18/2022 20:22:43  krbtgt/IDM.EXAMPLE.COM@IDM.EXAMPLE.COM
  config: pa_type(krbtgt/IDM.EXAMPLE.COM@IDM.EXAMPLE.COM) = 152