Hello,
in corporate network everything works.
If login in to a computer outside the corporate network and then connect to the corporate network via VPN (Cisco AnyConnect Secure Mobility Client)
Then All services with Windows authorization is work, except for one (WEB API )
The WEB API service is started under the service account and on it the is set "trust this user for delegation to any service (kerberos only)".
If, when VPN is connected, open a browser on behalf of another user and connect to webapi, then everything works
Problem is for users who login via a locally saved cache, delegation does not work. How to solve it ?
in corporate network everything works.
If login in to a computer outside the corporate network and then connect to the corporate network via VPN (Cisco AnyConnect Secure Mobility Client)
Then All services with Windows authorization is work, except for one (WEB API )
The WEB API service is started under the service account and on it the is set "trust this user for delegation to any service (kerberos only)".
If, when VPN is connected, open a browser on behalf of another user and connect to webapi, then everything works
Problem is for users who login via a locally saved cache, delegation does not work. How to solve it ?