Configuring resource based Kerberos constrained delegation for the Docs service
You can configure the
Docsservice to use resource based Kerberos constrained delegation (KCD) to access resources, such as
Microsoft SharePointservers and File Share servers, and remove the requirement for users to provide their network credentials to access resources within the domain, and between domains and forests. When you configure resource based KCD for your
Docsservice, the resource authorizes the service accounts that can delegate against the resource. If you need to enable KCD in your environment, it is recommended you enable resource based KCD, if your environment meets the minimum requirements. This is also recommended in environments that do not use multiple domains or forests. If your environment does not meet the requirements for resource based KCD, you can configure Kerberos constrained delegation (KCD).
Docsservice with resource based KCD allows users to access resources in the same domain or between domains and forests.
When you configure resource based Kerberos constrained delegation, you perform the following actions: