Activate Delegation for the K2 Workspace/Runtime Application Pool Account

Configuring Kerberos is an advanced task and should only be performed by an appropriately trained professional. The steps and configurations given in this help file are to be used as a guide - your system may require additional configuration due to different hardware and software compatibilities.

Activating delegation permissions in Active directory for the application pool account is only required under the following circumstances

• A web farm is currently being established / setup•
• The host headers used do not resolve to a specific server FQDN
• You want to force delegation to run under the specific application pool identity (decryption of service tickets are performed by the application pool identity rather than the system account)
  

[figure 1: Trust this delegation]

While infrastructure changes are required by K2, each environment is different and has its peculiarities which must be taken into account. Modifying the infrastructure could have unforeseen results if the changes are not appropriately understood or managed. Given the broad spectrum of underlying infrastructure utilized, it is recommended that a panel or committee with appropriate skill in each area concerned be assembled to outline the underlying infrastructure changes and gauge the impact of the required changes.