RUM User Name Detection...
Hi Experts, our organization uses RUM 9.25 to monitor an application where we require the ability to do user name detection. The user name is not exposed in plain text at all in the URL, HTTP header, cookies, or content of the HTML page, however, the application is using Kerberos for authentication. Is it at all possible for HP RUM to decrypt a Kerberos token to retrieve the username?
I know RUM can decrypt SSL traffic, so I was wondering if it offers similar functionalities that if we provide it with the secret key to decrypt the token and given RUM server is also deployed within the same domain (establish some level trust with AD), that if it would be able to do so?
Any information on this topic is appreciated.
I looked around regarding this issue, it seems that RUM - as of today - only can decode SSL trafficx, but not Kerberos.
You might wanna open a case with support to open an Enhancement Request for this.
If you find that this or any post resolves your issue, please be sure to mark it as an accepted solution.