17.10 - Sign-on As (Kerberos or LDAP Authentication) - Advanced SQL Engine - Teradata Database

Teradata Vantage™ - Advanced SQL Engine Security Administration

Advanced SQL Engine
Teradata Database
Release Number
Release Date
July 2021
Content Type
Publication ID
English (United States)
  1. A user logs on to Teradata Vantage with a domain username that matches a Vantage username, and a domain password. The default mechanism, or the mechanism named in the logon, defines the external agent that authenticates the user.

    See Logging on Using Sign-on As.

    Sign-On As using Kerberos authentication (KRB5 or SPNEGO mechanism) is usable only from Windows clients.
  2. The authenticating agent forwards the user credentials to Vantage.
  3. Vantage authorizes privileges associated with the matching username.
You must create Vantage users and grant them database privileges before the system can authenticate and authorize them. See Creating Users and Granting Privileges.