Kerberos Authentication and Windows Defender Credential Guard

Products

• SITEMINDER

Issue/Introduction

Environments using Kerberos Authentication that want to enable Windows Defender Credential Guard with constrained delegation enabled are not able to get it to work.

Kerberos Auth is working with Credential Guard but after enabling constrained delegation, it stops working.

Environment

SiteMinder 12.8.x
Windows 11 with CG enabled

Cause

This issue can occur if you are using a version of the Web Agent older than 12.52 CR11. 

Resolution

Constrained delegation is supported on Web Agent 12.52 CR11 and later.