Forum Discussion
Kevin_Stewart
Oct 09, 2018Employee
Yes, the APM SSO service account and the target resource must always be in the same realm.
The "Requesting ticket can't get forwardable tickets" error will generally happen if either delegation settings are misconfigured, or there's a duplicate SPN on an endpoint service. Have you checked for duplicate SPNs?
setspn -X