You can add Kerberos authentication for internal users, which requires inbound connection mode, to your deployment based on VMware Identity Manager outbound-only connection mode connectors. The same connectors can be configured to use Kerberos authentication for users coming from the internal network and another authentication method for users coming from outside. This can be achieved by defining authentication policies based on network ranges.
Note that the process to configure high availability of Kerberos authentication is different.
For more information, see Adding Kerberos Authentication Support to Your VMware Identity Manager Connector Deployment.