Proxy servers and IBM HTTP Server for Kerberos SSO
IBM® Engineering Lifecycle Management (ELM) deployments commonly install IBM HTTP Server as a proxy fronting server.
This configuration also works with SPNEGO, but it requires extra steps.
If you use IBM HTTP Server as a proxy server, configure WebSphere® Application Server for SPNEGO authentication before you configure Lightweight Third-Party Authentication (LTPA) to avoid unnecessary network calls.