Thanks, Ambarish.
As of this morning at least I can log onto CMC via Enterprize Authentication. Yesterday, I could not.
As far as my problem with silent SSO setup involving KeyTab file, it is still not working.
I'll repeat the whole SSO setup without the last KeyTab file step.
This is what I am planning to do:
1. Create new service account
2. Delete SPNs for old service account
3. Create SPNs for new service account
...etc, continue the SSO process
Any gotchas here that I need to be mindful of ?
Many thanks for your help.