Is there somone that have a good url for description of settings in HOD files in ASC? Or description of how to deploy acs in a good way?
And especially SSO/Kerberos settings.

IBM, and COMMON America, says you are not worthy of such information.

iACS: Rewrite the documentation for IBM i | IBM Power Ideas Portal

Dear Erik

Your first 2 questions are quite very broad which makes me doubt if you will receive any meaningful response. You stand better chance for useful answers if you ask more specific questions. For example, what is meant by a good way of deploying IBM i ACS?  What issue did you encounter that makes you ask your question? 

As for your last question, the answer seems simple as described here: Configuring IBM i Access Client Solutions applications to use Kerberos authentication at  https://www.ibm.com/docs/en/i/7.5?topic=sessi-configuring-i-access-client-solutions-applications-use-kerberos-authentication          

Hello,

Once single sign-on is implemented and further ACS needs to be configured to enable single sign-on. You can follow the below steps to test the single sign-on using kerberos on IBM i. In ACS change the connection to "Use kerberos authentication; do not prompt". If the configuration was correctly setup you should be able to login without entering the credentials using these settings. 

------------------------------
Rohit Chauhan
------------------------------