Kerberos authentication provides users, who are successfully signed in to their domain, access to their apps portal without additional credential prompts.

Kerberos authentication protocol can be configured in the Identity Manager service for desktops with Integrated Windows Authentication to secure interactions between users' browsers and the Identity Manager service and for one-touch single sign-in to iOS 9 mobile devices that are managed in AirWatch. For information about Kerberos authentication on iOS 9 devices, see Implementing Mobile Single Sign-in Authentication for AirWatch-Managed iOS Devices.