The wiki page If you are using a custom domain account in the identity pool for your WCF application, create an SPN for Kerberos to authenticate the client does not exist. If you think this is in error or the link you followed is broken, you can: