Rationale for Using Kerberos
In the context of the Virtual Traffic Manager, Kerberos Protocol Transition can be useful where the Virtual Traffic Manager sits on the border of your internal network, providing access to internal services. The internal services on a corporate LAN that authenticate using Kerberos can be made available over a more public network where access to the KDC is not permitted. The Virtual Traffic Manager uses alternate means to identify the principal name of the user and perform protocol transition.
The Virtual Traffic Manager supports protocol transition from TLS client certificate-based authentication.
