In the FIM 2010, I set the SPN, use the administrator when users log IdentityManagement the PORTAL, can not be authenticated? There is no fate but what we make

My configuration is: setspn-S FIMService / <alias> <domain> \ <serviceaccount> setspn-S HTTP / <FIMPortalAlias> <domain> \ <sharepointserviceaccount>There is no fate but what we make

Are you getting constant 401s? What are the failures logged in the event viewer? To start off I would create the fully qualified domain name SPNs as well : setspn-S FIMService/<alias>.Domain.com <domain>\<serviceaccount> setspn-S HTTP / <FIMPortalAlias>.domain.com <domain>\<sharepointserviceaccount> ALso, double-check the Sevice Principal names with ADSIEdit or SetSpn -l to ensure there are no typos, unnecessary spaces, or other problems. Cheers, Maxim

Yes, I set the SPN after log on using the browser Portal Web site, 401 errors occurred. Use setspn-l command to display properly SPN records.There is no fate but what we make

Hi John, Try following this thread which I started when i had the same issue. All is resolved now with mine :-) http://social.technet.microsoft.com/Forums/en/ilm2/thread/8da53e29-18b3-4c2c-8af9-3e3e6e357b49 Cheers Rob