Switch on delegation

Tip: You only need to follow this step if you're using Microsoft Outlook on-premises.

Procedure

Create a valid Service Principal Name (SPN) for the server on which the FM Portal was installed. Use the following script:

setspn –A SPN HOSTNAME

Example:
SPN based on the FM Portal URL
Hostname = Server1
URL = http://fm-portal.kunde.com
SPN = http/fm-portal.customer.com
setspn -A http/fm-portal.kunde.com Server1

Example:
SPN based on the hostname
Hostname = Server1
URL = http://fm-portal.kunde.com
SPN = http/Server1.customer.com
setspn -A http/Server1.kunde.com Server1

Note: The missing colon and slash compared to the URL are not typos.

Example:
URL = https://fm-portal.kunde.com
SPN = http/fm-portal.customer.com
Hostname = Server2
setspn -A http/fm-portal.kunde.com Server2

Note: When using SSL encryption (indicated by the "https" protocol), the SPN still begins with "http".

The SPN must be a reference to the domain name used by the FM portal.

In Active Directory, configure the delegation trust for the application server in the application server’s properties as shown in the following screenshot:

The change to the setting in Active Directory is not immediately available on the Exchange server. Please wait for the next AD replication. Then continue with the setup.