Configure on Domain Server

This section explains how to configure domain server for enterprise portal SSO. To configure the domain server, set delegation and Service Principle Name (SPN) for the domain server to access the SAP system.

To set delegation,

1. On the domain server, go to Active Directory Users and Computers.
2. In the left pane, expand <Domain_Name> and then expand Computers.
3. Select the computer on which Web and Mobile Server is installed, right-click, and go to Properties. The <Computer_Name> Properties dialog box appears.
4. Select Delegation tab.
5. Select Trust this computer for delegation to any service (Kerberos only).
6. Select Ok.

To set Service Principal Name,

1. Open command prompt as an administrator and type the following to set SPN:
   • setspn -s HTTP/{<Machine_name>} {<Machine_name>}
   • setspn -s HTTP/{<Machine_name>.<Domain_name>} {<Machine_name>}.
     • Example:  setspn -s HTTP/<IWMS_server_name>.<Domain_name>.com <IWMS_server_name>
2. To verify the updated SPN, run setspn -l {<Machine_name>}. The details appear.