Re: DCO generating multiple authentications requests on active directory once logged on
Without reviewing log information from your server to check into your case specifically, I can tell you DCO/ITA does limit its use of the login credentials to just the initial authentication to the DCO/ITA server.
This is at least partly because many of the api calls made by the desktop and web clients must successfully authenticate before they can be completed. This behavior also adds an additional level of security to DCO/ITA which security auditors may require as it means if a DCO/ITA users access were removed while they were using the product, their access is nearly immediately revoked. The customer does not need to wait for the user to logoff.