- A user logs on to Teradata Database with a domain username that matches a Teradata Database username, and a domain password. The default mechanism, or the mechanism named in the logon, defines the external agent that authenticates the user.Sign-On As using Kerberos authentication (KRB5 or SPNEGO mechanism) is usable only from Windows clients.
- The authenticating agent forwards the user credentials to the database.
- The database authorizes privileges associated with the matching database username.
You must create users and grant them database privileges before the system can authenticate and authorize them. See Creating Users and Granting Privileges.