Forum Discussion
Mar 10, 2022
Hi Miguel_1400,
I'm not certain that you can use a computer account, in each case that I have deployed this it has been a standard domain user account. I believe it is common practice to use a user type account as service accounts for Kerberos-enabled application authentication. Does the configuration you provided above work today?
Have you reviewed this article about Kerberos SSO for constrained delegation? K43063049: Configuring BIG-IP APM Kerberos SSO constrained delegation for portal access
See also:
K17976428: Overview of Kerberos constrained delegation
K59350434: Troubleshooting issues with BIG-IP APM Kerberos SSO constrained delegation
Thanks,
Josh Becigneul