Troubleshooting for SSO with IWA

• Make sure CC-SG has the correct time set that synchronizes with the domain's time setting. Default maximum tolerance is 5 minutes.
• Use hostname to access CC-SG, such as example or example.raritan.com to make sure it is intranet accessible.
• Make sure the client machine's OS can acquire a Kerberos ticket from Active Directory. You might need to enable DES on Window 7 OS.

  Refer to http://technet.microsoft.com/en-us/library/dd560670%28WS.10%29.aspx for details.