Select the SPNs you would like to delegate to, and then click OK. You should now see the selected SPNS in the services to this account can presented delegated credentials list. Repeat these steps for each delegation path defined in the beginning of this section. SharePoint Server configuration Configure and Start the Claims to Windows Token Service on PerformancePoint Services Servers The Claims to Windows Token Service (C2WTS) is a component of the Windows Identity Foundation (WIF) which is responsible for converting user claim tokens to Windows tokens. PerformancePoint Services uses the C2WTS to convert the user’s claims token into a windows token when the services needs to delegate credentials to a back-end system which uses Windows authentication. WIF is deployed with SharePoint Server 2010 and the C2WTS can be started from Central Administration. Each PerformancePoint Services Application server must run the C2WTS locally. The C2WTS does not open any ports and cannot be accessed by a remote caller. Further, the C2WTS service configuration file must be configured to specifically trust the local calling client identity. As a recommended practice you should run the using a dedicated service account and not as Local System (the default configuration). The C2WTS service account requires special local permissions on each server that the service runs on. Be sure to configure these permissions when you choose to run the C2WTS with a domain account. To ensure the C2WTS account picks up the needed privileges, reboot the server after you have configured the C2WTS. *NOTE: If you choose to configure the as local system you do not need to configure any additional local privileges.
Select the SPNs you would like to delegate to, and then click OK. You should now see the selected SPNS in the services to this account can presented delegated credentials list. Repeat these steps for each delegation path defined in the beginning of this section. SharePoint Server configuration Configure and Start the Claims to Windows Token Service on PerformancePoint Services Servers The Claims to Windows Token Service (C2WTS) is a component of the Windows Identity Foundation (WIF) which is responsible for converting user claim tokens to Windows tokens. PerformancePoint Services uses the C2WTS to convert the user’s claims token into a windows token when the services needs to delegate credentials to a back-end system which uses Windows authentication. WIF is deployed with SharePoint Server 2010 and the C2WTS can be started from Central Administration. Each PerformancePoint Services Application server must run the C2WTS locally. The C2WTS does not open any ports and cannot be accessed by a remote caller. Further, the C2WTS service configuration file must be configured to specifically trust the local calling client identity. As a recommended practice you should run the using a dedicated service account and not as Local System (the default configuration). The C2WTS service account requires special local permissions on each server that the service runs on. Be sure to configure these permissions when you choose to run the C2WTS with a domain account. To ensure the C2WTS account picks up the needed privileges, reboot the server after you have configured the C2WTS. *NOTE: If you choose to configure the as local system you do not need to configure any additional local privileges.