diff --git a/www/web-proxy-sso/src/opnsense/service/templates/OPNsense/ProxySSO/kerberos.sso.conf b/www/web-proxy-sso/src/opnsense/service/templates/OPNsense/ProxySSO/kerberos.sso.conf
index 433a246fd..5c5630962 100644
--- a/www/web-proxy-sso/src/opnsense/service/templates/OPNsense/ProxySSO/kerberos.sso.conf
+++ b/www/web-proxy-sso/src/opnsense/service/templates/OPNsense/ProxySSO/kerberos.sso.conf
@@ -11,7 +11,7 @@
 {%          endif %}
 {%      endfor %}
 {%      if ldap_method|length > 0 and helpers.exists('OPNsense.ProxySSO.EnableSSO') and OPNsense.ProxySSO.EnableSSO == '1' %}
-auth_param negotiate program /usr/local/libexec/squid/negotiate_kerberos_auth -d -i -s HTTP/{{system.hostname}}.{{system.domain}}@{{system.domain|upper}}
+auth_param negotiate program /usr/local/libexec/squid/negotiate_kerberos_auth -i -s HTTP/{{system.hostname}}.{{system.domain}}@{{system.domain|upper}}
 auth_param negotiate keep_alive on
 {%          if helpers.exists('OPNsense.proxy.forward.authentication.children') %}
 auth_param negotiate children {{OPNsense.proxy.forward.authentication.children}}