Overview

Some On-Premise customers are moving to an environment without any SPN (Service Principal Name), for various reasons, mainly related to security.

But SPNs are still needed for Kerberos authentication in Jive. This article explains the need and gives some details.

Solution

According to the official Jive documentation, an SPN is required for Jive to communicate with Kerberos SSO.

The reason is that the underlying implementation uses the Linux Kerberos implementation based on krb5.conf, and the Service Principal Name is an important part of the architecture.

If you need assistance in the design or configuration of Kerberos, please be aware that this is outside of the Jive Support Team's Scope of Work.

Support can help you if you find issues in an already existing implementation. For the initial configuration and tuning, you can engage Professional Services by contacting your Account Manager or Customer Success Manager.