AFO using SSO going through BOE 4.1 on Windows 2012 and a load balancer

Hi - I am having an issue with Analysis for Office 1.4.8 using SSO going through BOE 4.1 on Windows 2012 when using 2 web servers (default Tomcat/Apache) using an F5 load balancer.    I get an error when opening up Analysis for Office and then clicking on Open workbook from SAP BusinessObjects BI platform.  The error that I get is: The HTTP request is unauthorized with client authentication scheme ‘Anonymous’. The authentication header received from the server was ‘Negotiate’.  The remote server returned an error: (401) Unauthorized.: Login exception (Error: WSE 99999)

The thing is...the login box stays and the error slowly disappears and I can click on OK to the login box a second, or third, or fourth time and it eventually works.

----------------

Here is the Analysis for Office debug trace:

- Information:    Use SSO?:           True       | 2014-10-20T15:21:42    | com.sap.ip.bi.pioneer.core.boe.CrBoeSessionServiceBase.LoginEx() ()

- Error:  Exception when trying to logon to BOE server

General .NET Exception:

Login exception (Error: WSE 99999)

   at BusinessObjects.DSWS.Session.Session.Login(Credential credential)

   at com.sap.ip.bi.pioneer.core.boe.CrBoeSessionServiceBase.LoginEx(String user, String pw, Boolean iUseSso, String iLogonToken)

                | 2014-10-20T15:21:43    | com.sap.ip.bi.pioneer.core.boe.CrBoeSessionServiceBase.LoginEx() ()

- Error:  Cause of exception: The HTTP request is unauthorized with client authentication scheme 'Anonymous'. The authentication header received from the server was 'Negotiate'.             | 2014-10-20T15:21:43    | com.sap.ip.bi.pioneer.core.boe.CrBoeSessionServiceBase.LoginEx() ()

----------------

Some scenarios (all of these are opening up Analysis for Office and then clicking on Open workbook from SAP BusinessObjects BI platform):

With both webservers up and going directly to the webserver URL it works fine.

With one webserver up and going directly to the webserver URL it works fine.

With one webserver up and going through the load balancer URL it works fine.

With both webservers up and going through the load balancer URL it fails.

Here are the SPNs.

HTTP/xxxxx                            < loadbalancer

HTTP/xxxxx.domain.com                 < loadbalancer

HTTP/xxxxxx31.domain.com              < webserver1

HTTP/xxxxxx31                         < webserver1

HTTP/xxxxxx32.domain.com              < webserver2

HTTP/xxxxxx32                         < webserver2

BICMS/xxxxxxx.domain.com              < service account

I had two environments with dual webservers on BOE 4.0 running Windows 2008 going through the same load balancer that worked with both webservers up for well over a year.

Kind regards,

Kelly