Authentication with Kerberos instead of NTLM
When we create an SPN for http/oursite.com for the pid the site runs as, it breaks internal SSO. Is it possible to use Kerberos Constrained Delegation(KCD) to manage SSO?
SSO otherwise works fine, but our company is trying to implement Azure App proxy, so that's how we've run in to this.
Thank you for any insight.