Network Identity Manager Concepts: Identity Provider

Network Identity Manager relies on plug-ins to provide the majority of its functionality. One of the requirements is that there be at least one plug-in that is registered as an identity provider. The identity provider:

• defines the identity
• provides the engine that drives the Obtain New Credentials dialog
• performs the initial authentication which results in a network credential that can be used in conjunction with subsequent credential providers

Naturally, the identity provider plug-in that is distributed with MIT Kerberos for Windows is Kerberos v5 based and obtains Kerberos v5 ticket granting tickets as the network credential that represents the identity.