After a principal’s identity is verified the KDC leverages the Authentication Service (AS) to issue a TGT to the principal upon successful authentication. This allows the principal to request a Service ticket from the Ticket Granting Service (TGS)