Delegated authentication happens when a user is authenticated with one service, and that service uses the credentials of the authenticated user to connect to another service. Because services in the Informatica domain need to connect to other services to complete an operation, the Informatica domain requires the delegation option to be enabled in Active Directory.

You must enable delegation for all accounts for all of the accounts you created, except for the LDAP bind user account that you use to access and search Active Directory during LDAP synchronization. Set delegation to

Trust this user for delegation to any service (Kerberos only)

in the Delegation tab in the properties dialog box for each user account.

The following image shows the Delegation tab in the nodeuser01 account properties dialog box: