Settings must be correct for unconstrained delegation configuration.
The following settings must be correct:
- For Client Account: Account of user of User-Agent ( Internet
Explorer / Firefox / GDC)
- Client account can be delegated Account is sensitive and cannot
be delegated option is NOT selected
- For Service Accounts: User/Host Account of Service ( GAS /
IIS / Apache / SSH / ... )
- Service log-on account can delegate Account is trusted for
delegation option is selected
- Service host computer is trusted for delegation Trust computer
for delegation option is selected