The machine account need to be used to decrypt the Kerberos token/ticket that is attained from Lively Directory and forwarded because of the customer to the server to authenticate the user. Sign-up the Services Principal Identify (SPN) to the host, not the consumer from the app. Since the “Submit-Redirect-Get” pattern https://hiresomeonetotakeaspnetho84983.blogsidea.com/34720870/top-guidelines-of-online-asp-net-help