Setting an SPN attribute

There are two possible ways to set the Service Principal Name (SPN) attribute:

Automatic variants

The AD user that is used to start the MasterService has write and read access in Active Directory. octoplant sets the attribute itself if you have sufficient authorization.

Manual variants

The domain administrator assigns the attribute SPN in the Active Directory to the user under which the MasterService is to be started. Point it to the following SPN format: HTTP/<octoplant Servername>.<FQDN>.

Proceed as follows

  1. Open the ADSI editor on the domain controller: Control Panel -> System and Security -> Management -> ADSI editor.
  2. Establish the connection to the server Domain.
  3. Search for the service user and then right-click on Properties.
  4. In the Attribute editor, search for the entry servicePrincipalName and then click on Edit.

  5. Store the SPN for every server.

    Format: HTTP/<octoplant Servername>.<FQDN>

    6. Image: ADSI editor, deposit SPN

  6. Restart the services.

  7. SSO will now work.