Hi,
you can check your configuration here:
Microsoft Dynamics NAV Administration > select your Service > ex: DynamicsNAV71 > tab General > flag "use NTLM Authentication" > set flag to FALSE (to use Kerberos integrated authentication, the same of NAV Windows Client)
in your scvenario:
> you need only kerberos authentication in your scenario (NTLM set to FALSE) , you need only user mapped on NAV user (DOMAIN USER in your case)
> insert your site address on Trusted sites, after set in Local Intranet>custom level>user authentication>authomatic login with current user and password
> You can use "NETWORK SERVICE" to start your NAV service (and WS Services)
> Try to call NAV Web Services List, can you read page without input login\password ?
Example:
http://yourNAVserver:PORT/DynamicsNAV71/ws/services
- <discovery xmlns="schemas.xmlsoap.org/.../" xmlns:xsd="www.w3.org/.../XMLSchema" xmlns:xsi="www.w3.org/.../XMLSchema-instance">
<contractRef ref="http://altea-nav2013:7061/DynamicsNAV71/ws/SystemService" xmlns="schemas.xmlsoap.org/.../" />
<contractRef ref="http://altea-nav2013:7061/DynamicsNAV71/ws/Codeunit/Mail"
....
....
</discovery>
NTLM
IF "Use NTLM Authentication" flag = TRUE
"Specifies whether NTLM authentication is enabled for SOAP and OData web services. Enable this setting if you are using PHP or Java to initiate a web services connection to Microsoft Dynamics NAV."
-> request always Login\Password, not working with Kerberos integration, in your scenario you need only kerberos.