Create Service Principal Name
This topic describes how to create a service principal name.
Before you begin
- Create a dummy user account on the Active Directory Server node to represent the
Proficy Authentication application in the active directory registry. Make sure to
implement these settings for the account:
- It is mandatory user is a member of the domain user group. Refer to Microsoft documentation for more information.
- Set the account password to never expire. To do so, access the domain user
account properties dialog: .
- Configure Security Policy
Note: Delete existing SPNs, if any. Refer to Useful SPN commands.
About this task
Procedure
- Log in to your Active Directory machine.
- Open the Windows Command Prompt application.
-
Run the following command replacing with the appropriate code:
setspn -S HTTP/<FQDN> <user account>Code Replace With <FQDN>Fully Qualified Domain Name (FQDN) of the server on which Proficy Authentication service is running. For example,HTTP/[email protected]Note: These should be in capital letters:HTTPUAATESTAD.GE.COM(the domain name that follows @)
<user account>Dedicated dummy user account created for Proficy Authentication service. For example,
ghost1.Based on the above examples, your code should look like this:setspn -S HTTP/[email protected] ghost1