SSO

[Russ Allbery]

Michael Ströder <michael at stroeder.com> writes:

> Is the TGT sent by the browser in the SPNEGO blob? Up to now I thought 
> it's just a service ticket.

It's optional.  The browser can choose to delegate credentials or not,
based on local configuration.  (In Firefox, for example, it's two separate
configuration options.)

-- 
Russ Allbery (rra at stanford.edu)             <http://www.eyrie.org/~eagle/>