diff --git a/webui/.htaccess b/webui/.htaccess
index 849f549..78befb2 100644
--- a/webui/.htaccess
+++ b/webui/.htaccess
@@ -35,3 +35,15 @@
    </FilesMatch>
 </IfModule>
 
+<IfModule auth_gssapi_module>
+   <FilesMatch "sso\.php$">
+      RewriteEngine on
+      RewriteCond %{HTTP:Authorization}  !^$
+      RewriteRule .* - [E=HTTP_AUTHORIZATION:%{HTTP:Authorization},L]
+      AuthName "User with domain part (separated by @) in CAPITALS - e.g. 'user@DOMAIN'"
+      AuthType GSSAPI
+      GssapiBasicAuth On
+      GssapiCredStore keytab:/etc/krb5/http.keytab
+      Require valid-user
+   </FilesMatch>
+</IfModule>