Allows a service using Kerberos for authentication to obtain a Kerberos service ticket to itself on behalf of a user or proxy without requiring the user or proxy to be a part of the Kerberos environment. Since the intermediary is a member of the domain, it has the ability to transition the client request from a non-Kerberos model (CAC, X.509 certificate) to a required Kerberos model (username, domain membership, etc.)
Progress, Telerik, Ipswitch, Chef, Kemp, Flowmon, MarkLogic, Semaphore and certain product names used herein are trademarks or registered trademarks of Progress Software Corporation and/or one of its subsidiaries or affiliates in the U.S. and/or other countries. See
Trademarks for appropriate markings.