Kerberos authentication provides users, who are successfully signed in to their domain, access to their apps portal without additional credential prompts.
Kerberos authentication can be configured regardless of the type of directory you set up in VMware Identity Manager, Active Directory over LDAP or Active Directory (Integrated Windows Authentication).
Kerberos authentication protocol can be configured in the identity manager service to secure interactions between users' browsers and the identity manager service. Also, the protocol can be configured for one-touch single sign-in to iOS 9 or later mobile devices that are managed in the Workspace ONE UEM service. For information about Kerberos authentication on iOS devices, see Using the Cloud Hosted KDC Service.