- BlackBerry Docs service
- Steps to configure the Docs service
- Configure the database connection for the BlackBerry Docs service
- Configure a web proxy server for the Docs service
- Configure the Docs network and security settings
- Configuring Microsoft Office Web Apps and Office Online Server for Docs service support
- Configuring Kerberos constrained delegation for Docs
- Configuring Kerberos constrained delegation for the Docs service
- Find the SharePoint application pool identity and port
- Create Service Principal Names
- Add Kerberos constrained delegation in Microsoft Active Directory for Microsoft SharePoint
- Add Kerberos constrained delegation for file shares
- Turn on Kerberos constrained delegation
- Configuring resource based Kerberos constrained delegation for the Docs service
- Obtain an Entra app ID for the BEMS-Docs component service
- Storage services
- Managing Repositories
- Repositories
- Enable modern authentication for Microsoft SharePoint Online
- Configuring repositories
- Admin-defined shares
- Granting user access permissions
- Change access permissions
- Define a repository
- Edit a repository
- Define a repository list
- Add users and user groups to repositories and list definitions
- Allow user-defined repositories
- Enable user-defined repository permissions
- Access permissions
- Change user access permissions
- View user repository rights
- Enable users to access Box repository using a custom Box email address
- Configuring Docs for Rights Management Services
- Using the Docs Self-Service web console
- Configuring support for Microsoft SharePoint Online and Microsoft OneDrive for Business
- Auditing the Docs service
- In a BlackBerry UEM environment, add an app server hosting the BEMS-Docs service to a BlackBerry Dynamics connectivity profile
- Configuring Good Control for Docs service
- Configuring the Docs instance for high availability
- Disaster recovery
- Next steps
- Appendix: File types supported by the BlackBerry Docs service
- Windows Folder Redirection (Native)
- Local Folder Synchronization – Offline Folders (Native)
- Appendix: Supported Microsoft Office Web Apps and Office Online Server file types
Turn on Kerberos constrained delegation
When you configure Kerberos constrained delegation (KCD) for the
Docs
service, consider the following:
- OnlyWindowsauthentication inMicrosoft SharePointis supported. Forms-based and claims-based authentication are not supported.
- IP addresses are not allowed in theMicrosoft SharePointURLs and File Share paths that you configure inBEMS.
- In theBlackBerry Enterprise Mobility Server Dashboard, underBlackBerry Services Configuration, clickDocs.
- ClickSettings.
- In theKerberos Constrained Delegationsection, select theEnable Kerberos Constrained Delegationcheckbox.
- ClickSave.
- Restart theGood Technology Common Servicesservice.
- On the computer hosting theBEMS-Docsservice, grant theAct as part of the operating systemprivilege to theBEMSserver account (for example, GoodAdmin).
- Run theLocal Security Policyadministrative tool.
- In the left pane, expandLocal Policies.
- ClickUser Rights Agreement.
- Configure the service account for theAct as part of the operating systempermission.
- ClickOK.