To configure Integrated Windows Authentication (IWA) Single Sign-On (SSO) for Legal Hold authentication:

Note: Before you perform the following steps, you must clear your browser cache.

1. Log onto the eDP web interface as a system administrator.
2. From the System view, click Settings, and then click the Legal Hold Authentication tab.
   
3. Enable LDAP authentication for legal hold notices. Refer to the Legal Hold User guide for details.
4. Enable Single Sign-On: Select the Enable Integrated Windows Authentication (IWA) with LDAP check box.
5. Select the authentication preference:
   • Use Kerberos only: To use only the Kerberos authentication.
   • Use Kerberos first; if it fails, use NTLM: To use the default Kerberos authentication first, and if it fails, NTLM will be used for authentication.
6. Test the LDAP connectivity: Enter credentials of a valid LDAP user who is part of the User Base provided and then click Test Connection.
7. Click Save.

For Active Directory configurations: set the Service Principal Name (SPN) for the Legal Hold confirmation server. A domain administrator should run the following setspn command for the Legal Hold confirmation server from any system in the domain.