Enhancement Request 308585 to have all options available on the Delegation tab in Active Directory Users and Computers to a new separate Delegation tab in the Web Interface. This will allow Active Roles to configure all delegation options, including constrained delegation.
Delegation Tab in Active Directory Users and Computers account:
The only option from this available for Active Roles is in the Web Interface, for Computer objects only on the General tab, "Trust this computer for delegation":
This setting enables the "Trust this computer for delegation to any service (Kerberos only)" that is found in Active Directory User and Computers computer object delegation settings. This is unconstrained delegation.
© 2025 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center