Is the J2EE Service User needed for Kerberos SSO?

[Former Member]

I successfully configured J2EE engine to do SSO via Kerberos. I followed the SPNegoLoginModule Installation Guide in version 1.27. It says that you have to create a "J2EE Service User" in order to make Kerberos work. I did so. But the need for this user is not mentioned in the Kerberos online help. So i deleted this user from the UME and SSO still works. My Question is now: is the user not needed anymore when using SP15 or similar?

[Former Member]

I had a problem with Kerberos authentication where the internal "Guest" user was locked.

After unlocking this Guest user, the authentication worked.

So, I assume your self created user didn't had any affect.

Run the Diagtool. It should give you precise information what is going on.