Task 1: Configure service principal names (SPN)

To configure constrained delegation for the PI Integrator for Esri ArcGIS account, service principal names (SPNs) must exist for the following:

• The machine on which PI Integrator for Esri ArcGIS is installed

• The PI Integrator for Esri ArcGIS account

Follow the procedure below to verify that these SPNs exist or create the required SPNs.

1. Open a console window as a domain administrator.

2. Create an SPN for PI Integrator for Esri ArcGIS service account. Enter the following commands to specify both the fully-qualified and non-qualified machine name:

   setspn -S http/hostname domain\service_account

   setspn -S http/fully-qualified_domain_name domain\service_account

Example SPN configuration

For example, assume that PI Integrator for Esri ArcGIS is running on esri_Integrator.mydomain.int and PI Integrator for Esri ArcGIS is running as service account domain\PIIntegratorService. Enter the following to configure the SPN:

setspn -s http/esri_Integrator.mydomain.int domain\PIIntegratorService

setspn -s http/esri_Integrator domain\PIIntegratorService