RE: [security-services] Kerberos use cases

> 2.  Kerberos Clients/Browsers:
> 
> 	the local environment consist of workstations that are 
> Kerberos enabled with the user using Kerberos to authenticate 
> to the local domain.  The user then wishes to access a remote 
> domain using a browser without having to be re-authenticated. 
>  The SAML 2.0 Browser profiles will be used to provide the 
> SAML assertion to the remote domain.

John, in this case is the browser unmodified? If not, how can we combine a
local Kerberos credential with a SSO flow in the browser?

-- Scott