0 votes

Still evaluating the product ;-)
I'm testing the SPML provider and when i try to send a SPML request through the sample page, the SPML response is always "The NTLM authentication type is not appropriate".
I tried to disable Kernel Mode auth in IIS with no luck.

Any idea ?

by (800 points)

1 Answer

0 votes
by (18.0k points)
selected by
Best answer


You need to configure IIS to support the Kerberos protocol for network authentication.

Make sure the computer where the SPML provider is running is allowed to be trusted for delegation:
Allow a computer to be trusted for delegation for specific services

For more details, please see:

Configuring and Troubleshooting NTLM and Kerberos on Windows 7 (Windows Server 2008) and IIS7

Configuring Kerberos on IIS in a W2K3 domain

How to configure IIS to support both the Kerberos protocol and the NTLM protocol for network authentication


It does it. Thanks for your quick and efficient support.

Related questions

0 votes
0 answers

Hi Evryone, I am trying to set up an external portal within a new webserver on dmz, and with only access to a webservice created from selfservice. The new webservice is only ... login, only reset password. What I am mising there that its not working? Thanks,

asked Nov 26, 2021 by yagoityd (20 points)
0 votes
0 answers

After updating from 2020.1 to 2021.1, my IIS keeps throwing a 404 not found error when attempting to access the Web interface configurator. I'm thinking that the path could be wrong or something could be missing?

asked Mar 9, 2021 by blauprgy (20 points)
0 votes
0 answers

Hi, how can I change Help Desk to something a little more specific like "Onboarding Portal"? Or a bit more catchy that our HR will like rather then see Help Desk in the left hand corner.

asked Oct 9, 2019 by 6FigureMission (140 points)
0 votes
1 answer

Hello, I was wondering if it is possible to add the enrolment status of a user to the web interface? This is so that the helpdesk analysts can see at a glance the ... and direct them to the self service portal if they are already enrolled. Kind Regards Danny

asked Sep 19, 2017 by dannyd (200 points)
0 votes
1 answer

Hi, In the install notes you state:- * On the Service for Web Interface page, specify the DNS host name of the Adaxes service the Web Interface will connect to. If the ... the past, but we've been doing some additional scenario testing and it isn't right now!

asked Jun 25, 2013 by firegoblin (1.6k points)
2,803 questions
2,535 answers
62,312 users