Active Directory Configuration
Create a user in Active Directory to handle Kerberos Authentication. The only requirements for this service account are:
Select the option to prevent the user from changing their password
Select the option to indicate that the user’s password never expires
Select the option to not require Kerberos pre-authentication
To add a Service Principal Name mapping for the service account, execute the following command in Powershell:
setspn -a HTTP/{RapidIdentityURL} {KerberosUsername}
RapidIdentityURL: The FQDN of your RapidIdentity server, for example “www.example.com”
KerberosUsername: The username created previously in step 1a