Azure AD Connect: Seamless Single Sign-On - How it works ...
Important. Seamless SSO supports the AES256_HMAC_SHA1, AES128_HMAC_SHA1 and RC4_HMAC_MD5 encryption types for Kerberos. It is recommended that the encryption type for the AzureADSSOAcc$ account is set to AES256_HMAC_SHA1, or one of the AES types vs. RC4 for added security.The encryption type is stored on the msDS-SupportedEncryptionTypes attribute of the …