SSO on WinAD not working with full name

Hi,

I've successfully configured the SSO on a new BI4.1 SP6.3, but it works only with the hostname (eg http://boxi:8080/BOE/BI ), not with the FQDN (http://boxi.domain.fr:8080/BOE/BI ), not with an alias on the server ( http://alias.otherdomain.priv:8080/BOE/BI), and not with the IP.

Is it supposed to work, is there a hope, am I missing some configuration? Putting the FQDN in the trusted zone in IE does not work.

We hope to make it work with IE and Firefox...

Any idea? Thanks!

I've setup the setspn this way:

setspn -a BOEXI40SIABOXI/adminbo.domain.fr adminbo
setspn -a HTTP/boxi adminbo
setspn -a HTTP/10.1.2.3 adminbo
setspn -a HTTP/boxi.domain.fr adminbo

setspn -a HTTP/alias.otherdomain.priv adminbo

Config : BI 4.1 SP6.3

Windows AD

IE10, last Firefox ESR