If you try to configure the Blackberry Enterprise Server 5.0.x to configure Microsoft® Active Directory® authentication you get the error message:
The Microsoft® Active Directory® account that you specified is not configured to support single sign-on authentication. You must associate a service principal name to the Microsoft Active Directory account before you can add the account to the BlackBerry® Administration Service.
Solution 1:
In order to use this feature the server you wish to add via the BlackBerry Administration Service must be a KDC (Key Distribution Center).
