Forum Discussion
NimbostratusComputer account for kerberos delegation
Hello,
We actually have an account user for our SSO Kerberos profile and I would like to use computer account instead of user account for security purpose.
But how can I configure my computer account on the kerberos sso profile ? I have to set an password for the account but but we don't know the password with an computer account rigth ?
I don't understant and don't know if it's possible with an computer account
Regards,
1 Reply
Hi Miguel_1400,
I'm not certain that you can use a computer account, in each case that I have deployed this it has been a standard domain user account. I believe it is common practice to use a user type account as service accounts for Kerberos-enabled application authentication. Does the configuration you provided above work today?
Have you reviewed this article about Kerberos SSO for constrained delegation? K43063049: Configuring BIG-IP APM Kerberos SSO constrained delegation for portal access
See also:
K17976428: Overview of Kerberos constrained delegation
K59350434: Troubleshooting issues with BIG-IP APM Kerberos SSO constrained delegationThanks,
Josh Becigneul
