16.10 - Single Sign-on (Kerberos Authentication) - Teradata Database

Teradata Database Security Administration

Teradata Database
Release Number
Release Date
June 2017
Content Type
Publication ID
English (United States)
  1. A user logs on to the network with a domain username that matches a Teradata Database username, and a domain password. Kerberos authenticates the user. The user can then access any applications and data that support Kerberos authentication, including Teradata Database.
  2. The user connects to Teradata Database without resubmitting a username and password, although the connection must specify the database name (tdpid) and the security mechanism that corresponds to the authenticating agent. See Logging on Using Single Sign-on.
  3. The authenticating agent for the network logon forwards the domain username to the database.
  4. The database authorizes the user with the database privileges available to the matching database username.