If you use Kerberos authentication, it must be enabled in the browsers of all end-user computers.

This is applicable for all users accessing Spotfire Server, either from a browser, or Spotfire Analyst.