Laserfiche Server and Web Access 9.2 are compatible with constrained delegation. Laserfiche Server and Web Access will both use an SPN of the form HTTP/host.example.com, where "host.example.com" is the name of the host that the software is running on. Naturally, these will be different if WA and LFS are running on different hosts, and the same if they are running on the same host.

To use constrained delegation, configure Web Access to run as a Windows AD user and specify constrained delegation for that account in the AD Users and Computers snap-in, specifying the SPNs for Web Access and the Laserfiche Server as allowed services.