unable to run Update-AzureADSSOForest

Don_Vlogeer 

Hi, Don.

I'd recommend reading the following two articles as there's not enough information in the error you've provided to guide us:

• Azure Active Directory Connect: Troubleshoot Seamless Single Sign-On - Microsoft Entra | Microsoft Learn
• Azure AD Connect - Microsoft Entra | Microsoft Learn

I've bookmarked the second article on the process for rotating the Kerberos decryption key as that's related to the first article, but you should probably read the whole article.

Also pay particular attention to the information call-outs (both articles have these call-outs) that discuss things to look out for in relation to the Active Directory domain administration account (included in the picture below for ease of reference) used with the call to Update-AzureADSSOForest, as not adhering to these will also result in a Kerberos error:

Cheers,

Lain