The machine account must be accustomed to decrypt the Kerberos token/ticket that's obtained from Lively Directory and forwarded with the consumer on the server to authenticate the user. Sign up the Services Principal Title (SPN) with the host, not the user with the application. There is a dilemma. By default, https://mariobsslg.blogvivi.com/29098502/a-review-of-asp-net-project-help