Use domain user for the web server service

Technical references : Administration : Single Sign-On Planon Web Client : WAFFLE : Use domain user for the web server service

If you want to use the service account for the server service in combination with WAFFLE the HTTP SPN for the web server should be set to the service account. Run the following command to set the SPN:

setspn -U -S http/planonserver.domain.ext serviceaccount@domain.ext

Note that you need to be a member of the Domain Admins, Enterprise Admins or have been granted the permission to set the SPN. By default the http SPN is not set, so Waffle will use the host SPN (default linked to Local System). After setting the SPN, you cannot use Waffle with Local System anymore until you remove the SPN again.