Some guidelines relating to the delegation settings for the trusted user are provided below:

  • The LoadMaster trusted user account must have delegation enabled (the ability to request a ticket on behalf of a user logging in) and be set to Use any authentication protocol
Note: Delegation is not enabled by default when a user is created.
  • In constrained delegation mode, the service(s) that need to be available must be selected. To do this, click the Add button.
Note: Constrained delegation can be thought of as a white list type of security authenticating. Adding a service here is really adding it to the white list.