Delegation for network shares and SharePoint

This article will help you configure MobileIron credential delegation methods with network shares and SharePoint sites. This guide requires that you have already configured both MobileIron and Files Advanced, their interoperability and their respective Active Directory accounts that delegate authentication.

For network shares and SharePoint servers, do the following:

Following these steps, you will enable delegation from the Gateway server to the target server(s).

1. Open Active Directory Users and Computers.
2. Find the computer object corresponding to the Gateway server.

   Note: If you are running the Gateway server under a User account, select that User object instead.

3. Right-click on the user and select Properties.
4. Open the Delegation tab.
5. Select Trust this computer for delegation to specified services only.
6. Under that select Use any authentication protocol.
7. Click Add.
8. Click Users or Computers.
9. Search for the sever object for the SMB share or SharePoint server and click OK.
   • For SMB shares, select the cifs service.
   • For SharePoint, select the http service.
10. Repeat these steps for each server that the Files Advanced Gateway server will need to access.
11. Repeat this process for each Gateway server.

These delegation changes, can take a few minutes to propagate depending on the size of the domain forest. You may need to wait up to 15 minutes (possibly more) for the changes to take effect. If it's still not working after 15 minutes, try restarting the Files Advanced Gateway service.