Forum Discussion
Steve_Lyons
Jul 31, 2018Ret. Employee
More requirements.
- The delegation account must be in service principal name (SPN) format “host/name”.
- In the active directory, the delegation account must use this SPN value for both its servicePrincipalName and userPrincipalName attributes.
- This same SPN value must also be used in the Account Name field in the Kerberos SSO config.
- Kerberos only mode enables the “Kerberos Protocol Transition” protocol option, which is required for APM Kerberos SSO to work.