Setup Power Server for Single Sign-On

The following steps are required in order to enable Single Sign-On (SSO) for PROLIN Power Server:

1. Install PROLIN Power Server on a machine that is part of the Windows domain.
   This domain must use Active Directory.

   NoteNote

   By default, only the Kerberos protocol is supported.
   This can be changed as described in the Security Settings section.

2. Run PROLIN Power Server as a Windows service under the Local System account.

3. Create a Service Principal Name (SPN) on the target machine using the setspn command from a Command Prompt:

setspn -S PROLIN/<host>[:port] <machine>

• <machine> = the name of the target machine
  
• <host> = the fully qualified DNS name
  
• [:port] = optional, only required if using a non-default port

Examples:

• If the fully qualified DNS name is host1.emea.prolin.com and PROLIN Power Server runs on the default port 5100:

  setspn -S PROLIN/host1.emea.prolin.com host1

• If PROLIN Power Server runs on host2.emea.prolin.com and uses non-default port 1234:

  setspn -S PROLIN/host2.emea.prolin.com:1234 host2

4. Start PROLIN Power Server and verify that it (and its modules) is running without failures.