Take the 2-minute tour ×
SharePoint Stack Exchange is a question and answer site for SharePoint enthusiasts. It's 100% free, no registration required.

I'm trying to configure PerformancePoint using this article and Analysis Services is running and configured on that box, but the constrained delegation won't let me choose the MSOLAPSvc.3 service because it's not there. My SPN's are as follows.

PerformancePoint Web application pool service account:

HTTP/webapplication
HTTP/webapplicationFQDN
HTTP/webapplicationFQDN:port (port 80 is seperate and uses NTLM)

SQL Analysis Service account:

MSSQLSVC/SQLServer
MSSQLSVC/SQLServerFQDN
MSSQLSVC/SQLServerFQDN:instance
MSOLAPSvc.3/SQLServer
MSOLAPSvc.3/SQLServerFQDN
MSOLAPSvc.3/SQLServer:instance

PerformancePoint Service Application Pool account:

SP/svcPPS (to open delegation)

Claims to Windows Token Service Application Pool account:

SP/C2WTS (to open delegation)

IIS settings: Kernel mode and EP off. Providers are: Negotiate first, NTLM second.

I am getting security logs that Kerberos is used successfully on the web application level, but using Kerberos for PerformancePoint i've read needs to have constrained delegation, and I can't select the MSOLAPSvc.3 service on the sqlserver, and therefore my dashboard designer will not connect to a test data source.

share|improve this question
add comment

1 Answer 1

up vote 0 down vote accepted

After 4 hours, I found you need to add the SPN of the service you want to use to the SERVER itself. Anything that is missing is not added to that server's SPN (not user account)

setspn -A MSOLAPSvc.3/serverFQDN server
share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.