You should push a krb_cred message containing the ticket you wish to proxy from the web client to the web application.