SPN is a service principal name -- it's a domain config setting so a client knows the identity of the web server so that we know how to create the kerb ticket for authentication.