Computer account for kerberos delegation

Question

Hello,We actually have an account user for our SSO Kerberos profile and I would like to use computer account instead of user account for security purpose.But how can I configure my computer account on the kerberos sso profile ? I have to set an password for the account but but we don't know the password with an computer account rigth ?I don't understant and don't know if it's possible with an computer accountRegards,&nbsp;

joshbecigneul · Answer

Hi&nbsp;Miguel_1400,&nbsp;
I'm not certain that you can use a computer account, in each case that I have deployed this it has been a standard domain user account. I believe it is common practice to use a user type account as service accounts for Kerberos-enabled application authentication. Does the configuration you provided above work today?
Have you reviewed this article about Kerberos SSO for constrained delegation?&nbsp;K43063049: Configuring BIG-IP APM Kerberos SSO constrained delegation for portal access&nbsp;
See also:K17976428: Overview of Kerberos constrained delegationK59350434: Troubleshooting issues with BIG-IP APM Kerberos SSO constrained delegation
Thanks,
Josh Becigneul

Forum Discussion

Computer account for kerberos delegation

Recent Discussions

Adding New BigIP Units Using Free CPUs on i7800 (LB13 & LB14) to an existing HA Pair

I-rule redirect advise

NGINX - Need more details on NGNIX WAF

Sizing for HW and SW based

table lifetime command

Related Content

Troubleshooting Kerberos Constrained Delegation: Strong Encryption Types Allowed for Kerberos

Lightboard Lessons: Kerberos Delegation & Protocol Transition

Configuring Smart Card Authentication and Kerberos Constrained Delegation in F5 Access Policy Manager (APM)

Single-Sign-On mit Kerberos Constrained Delegation

Getting Started with Automating Deployment of MCN & Edge Compute