If a client wants to log in to the app server and automatically transmit the user data (SSO), either from an embedded browser or any browser, the app server must either be accessible under Local intranet or be included in the list of Trusted sites.
If the PARTapplicationServer is not run with a " Local System account ", but with a service account, please note that the service also requires ServicePrincipalName entries in the Active Directory. See Section 3.4.3, “AppServer Configuration ”.