SAS Viya currently allows an AD UPN to not be the same name as an SPN in scenarios where a user only IWA's into Viya Login via Kerberos, but not in cases where the Kerberos credentials then need to be delegated downstream to SQLSvr/Hadoop/etc via SAS/ACCESS products. Some of our clients have internal IT naming-requirements for their UPNs which do not match the HTTP/xxxxxxxxx naming requirements for an SPN.
I'd like to request that Viya support the UPN name being different from the SPN, in scenarios where the Kerberos credentials will be delegated downstream.
Many thanks!
