> For the complete documentation index, see [llms.txt](https://academy.pentaho.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://academy.pentaho.com/administrator-path-sandbox/speciality-courses.md).

# Speciality Courses

The advanced tier of the Administrator path. Standalone courses for experienced administrators, starting with Integrating Authentication Mechanisms — OpenID Connect and Kerberos/IWA.

{% hint style="warning" %}
**🧪 SANDBOX — draft content**
{% endhint %}

The advanced tier, for experienced administrators who want to push beyond standard operations into enterprise identity and single sign-on.

{% columns %}
{% column %}
{% hint style="success" icon="cube" %}
**Each one stands alone**

Take a speciality on its own. You don't need to work through Levels 1 to 3 first — just enough hands-on experience with Pentaho's security configuration to keep up.
{% endhint %}
{% endcolumn %}

{% column %}
{% hint style="info" icon="award" %}
**Counts towards Level 3**

Integrating Authentication Mechanisms forms part of the **Level 3 — Certified** credential, so the work counts twice if you're heading that way.
{% endhint %}
{% endcolumn %}
{% endcolumns %}

***

<h3 align="center">Who these are for</h3>

{% columns %}
{% column %}
{% hint style="success" icon="circle-check" %}
**You're ready — if you**

* Administer a Pentaho Server day to day
* Are comfortable editing Pentaho's security configuration files directly
* Have connected a server to LDAP or Active Directory, or hold Level 2 course accreditation
  {% endhint %}
  {% endcolumn %}

{% column %}
{% hint style="info" icon="signs-post" %}
**Start with the levels if you**

* Are new to administering Pentaho
* Haven't yet hardened and configured a server end to end
* Prefer a guided curriculum over filling gaps on your own

**Level 1 — Practitioner** takes a fresh install through to a hardened, production-ready server.
{% endhint %}
{% endcolumn %}
{% endcolumns %}

***

<h3 align="center">Choose a speciality</h3>

<table data-view="cards"><thead><tr><th></th><th></th><th></th><th></th><th></th><th></th><th data-hidden data-card-target data-type="content-ref"></th></tr></thead><tbody><tr><td><i class="fa-key" style="color:blue;">:key:</i> <strong>Integrating Authentication Mechanisms</strong></td><td>Signing in without a Pentaho login page, beyond Level 2's LDAP and Active Directory — OpenID Connect / OAuth 2.0 with Keycloak and Microsoft Entra ID, Kerberos/SPNEGO silent login for domain-joined users, and where the older SAML and CAS integrations now stand, ending in a capstone.</td><td><i class="fa-file-lines" style="color:green;">:file-lines:</i> 13 lessons</td><td><i class="fa-rocket">:rocket:</i> 3 modules</td><td><i class="fa-flask" style="color:orange;">:flask:</i> 7 workshops</td><td><i class="fa-clock" style="color:cyan;">:clock:</i> ~3h 10m</td><td><a href="/administrator-path-sandbox/speciality-courses/integrating-authentication-mechanisms.md">Integrating Authentication Mechanisms</a></td></tr></tbody></table>

{% hint style="warning" icon="circle-question" %}
**REPLACE-ME** — scope any further Administrator specialities, and confirm the target Pentaho version for this one (the other paths are built against 11.0.0.3-310). A cover image is also needed to match the role cards on the Academy landing page.
{% endhint %}

***

<h3 align="center">What you'll take away</h3>

{% columns %}
{% column %}
{% hint style="info" icon="right-to-bracket" %}
**A working single sign-on**

OpenID Connect configured end to end against Keycloak and Microsoft Entra ID, with signed-in users matched to Pentaho roles — and Kerberos/IWA silent login where domain-joined users need it.
{% endhint %}
{% endcolumn %}

{% column %}
{% hint style="info" icon="award" %}
**Credit towards certification**

The capstone feeds into the Level 3 — Certified requirements rather than carrying a separate course exam of its own.
{% endhint %}
{% endcolumn %}
{% endcolumns %}

***

<h3 align="center">How to get access</h3>

{% stepper %}
{% step %}
**Read the course outlines**

Open the speciality you're considering and check the modules cover the work you actually do.
{% endstep %}

{% step %}
**Talk to your Pentaho Account Executive**

Courses and subscriptions are purchased through your Pentaho Account Executive — a single seat or the whole team. They'll size it with you and get the order placed. No Account Executive yet? Email <academy@pentaho.com> and we'll connect you.
{% endstep %}

{% step %}
**Receive your voucher code**

You'll be sent a voucher code giving access to the course or courses you bought.
{% endstep %}

{% step %}
**Redeem your code and start your lab**

Redeem the code on the Pentaho training portal and your hosted lab deploys with the Lab Guide built in. Every screen is shown step by step in the voucher walkthrough.

{% embed url="<https://pentaho.selfpaced.training/access/login>" %}

<figure><img src="https://2974708810-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FD8OCPAs0ox63GRPioSZt%2Fuploads%2FVV0qvAA2Apua6nvVTLtn%2Fportal.png?alt=media&#x26;token=38b74933-f824-4e15-ba10-ec3a5270ddec" alt="The Pentaho training portal sign-in page"><figcaption></figcaption></figure>
{% endstep %}
{% endstepper %}

***

<h3 align="center">Still have questions?</h3>

{% columns %}
{% column %}
{% hint style="info" icon="gitbook-assistant" %}
**Quick answers about the content**

Which mechanisms a module covers, what a speciality assumes you already know, how it relates to the levels. Press <kbd>Ctrl</kbd> + <kbd>K</kbd> and click **Ask** for an instant answer from these pages.

<button type="button" class="button primary" data-action="ask" data-icon="gitbook-assistant">Ask about the specialities...</button>
{% endhint %}
{% endcolumn %}

{% column %}
{% hint style="info" icon="envelope" %}
**Talk to the Academy team**

For anything the assistant can't answer — pricing, licensing, access periods, or sizing a programme for your team — email us at <academy@pentaho.com>.

We read every message and reply as soon as we can. If it's easier to talk it through, we'll set up a call from there.
{% endhint %}
{% endcolumn %}
{% endcolumns %}

***

<p align="center"><a href="/administrator-path-sandbox/administrator.md" class="button secondary" data-icon="arrow-left">Back to the Administrator path</a></p>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://academy.pentaho.com/administrator-path-sandbox/speciality-courses.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.