Skip to Content
avatar image
Former Member

Why can we assign not hostname but FQDN or FQDN+Port as well to service account for HTTP SPN?

Hi All,

We have configured SPNEGO for Fiori and found that Kerberos SSO works fine when we assign not host name but FQDN or FQDN+Port as well to service account for HTTP SPN.

What information does Fiori actually sends to AD in order to issue Kerberos Token? Does anyone know why?

Also, we have found that we have to assign via points SPN e.g. load balancer. Could you please tell me why via points SPN is also required?

Best Regards,

Yudai

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

0 Answers