Recording Kerberos applications with Internet Explorer

You must configure your browser before you attempt to record Kerberos applications.

Before you begin

The client computer must be a member of the domain for which single sign-on (SSO) has been defined.


To configure Internet Explorer to use Simple and Protected GSS-API Negotiation Mechanism (SPNEGO):
  1. Log on to Windows with a user ID for the domain for which SSO has been defined.
  2. Start Internet Explorer.
  3. Click Tools > Options.
  4. Click the Security tab.
  5. Define the site to authenticate to using Integrated Windows Authentication. Depending on your enterprise policy, you define the site in either the Local intranet zone or the Trusted sites zone.
    • To define the site in the Local intranet zone, select Local intranet. The instructions that follow assume that you are defining the site in the Local intranet zone.
    • To define the site in the Trusted sites zone, select Trusted sites. In the Security Settings for the Trusted sites, click Automatic logon with current username and password, not Automatic logon only in Intranet zone.
  6. Click Sites.
  7. Click Advanced.
  8. Type the URL for the hostname for which you want to enable SSO. For example, type
  9. Click Add.
  10. Click OK.
  11. Click OK again.
  12. Click the Advanced tab.
  13. Scroll down to Security, and select Enable Integrated Windows Authentication (requires restart).
    This option is not available on Internet Explorer 5.5. Integrated Windows Authentication is always enabled on Internet Explorer 5.5.
  14. Click OK.
  15. Restart Internet Explorer.