Deploying with Windows Authentication - Single sign-on

How to

  1. Follow Deploying as Windows service.

  2. Create domain account which will run the YSoft SafeQ Job Service. It has to be in the domain using which your users sign in. It needs to have the local administrative rights on the server.

  3. Service Principal Names (SPNs) must be added to the user account running the service (not the machine account!).

    • Execute in an administrative command shell (where myservername.mydomain.com is the hostname of the server where YSoft SafeQ Job Service runs and username is username of the user created in the step 2):

      setspn -S HTTP/myservername.mydomain.com username


  4. Go to services, right click YSoft SafeQ Job Service and select properties.

    images/download/attachments/160475552/Screenshot_2019-12-16_at_10.04.07.png

  5. Go to Log On tab, select This account and click on Browse.
    images/download/attachments/160475552/Screenshot_2019-12-16_at_10.19.20.png

  6. Select the user that you created in the step 2 (enter the name into Enter the object name to select and click on Check Names verify whether entered correctly).
    images/download/attachments/160475552/Screenshot_2019-12-16_at_10.05.01.png

  7. In the Windows Services dialog, you should see your new user in the Log On As column.

    images/download/attachments/160475552/Screenshot_2019-12-16_at_10.22.47.png

  8. Restart the YSoft SafeQ Job Service windows service.