Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry Work 3.1
  3. Configuring Office 365 Modern Authentication for BlackBerry Dynamics Apps
  4. Turn on resource based Kerberos constrained delegation

Turn on resource based Kerberos constrained delegation

When you configure resource based Kerberos constrained delegation (KCD) for the 
Docs
 service, consider the following:
  • Only 
    Windows
     authentication in 
    Microsoft SharePoint
     is supported. Forms-based and claims-based authentication are not supported. 
  • IP addresses are not allowed in the 
    Microsoft SharePoint
     URLs and File Share paths that you configure in 
    BEMS
    .
  1. In the 
    BlackBerry Enterprise Mobility Server Dashboard
    , under 
    BlackBerry Services Configuration
    , click 
    Docs
    . 
  2. Click 
    Settings
    . 
  3. In the 
    Kerberos Contrained Delegation
     section, select the 
    Enable Kerberos Constrained Delegation
     checkbox.
  4. Restart the 
    Good Technology Common Services
    .
  5. On the computer hosting the 
    BEMS-Docs
     service, grant the 
    Act as part of the operating system
     privilege to the 
    BEMS
     server account (for example, GoodAdmin).
    1. Run the 
      Local Security Policy
       administrative tool.
    2. In the left pane, expand 
      Local Policies
      .
    3. Click 
      User Rights Agreement
      .
    4. Configure the service account for the 
      Act as part of the operating system
       permission. 
  6. Click 
    OK
    .