Services for Users to Proxy (S4U2Proxy)

Part of the Kerberos v5 extension called S4U (Services for Users), this component allows a service to obtain service tickets to arbitrary services on behalf of the user with only the user’s service ticket to itself. The services are constrained by the administrator and this element is the Kerberos Constrained delegation extension of Kerberos.