[keycloak-user] Clarification about Kerberos Credential Delegation

[Lösel Alexander]

Hi all,

I'm absolutely new to OAuth. I just read the docs about Kerberos (https://www.keycloak.org/docs/3.2/server_admin/topics/authentication/kerberos.html) and I am not sure if I understand correctly. Is it possible to own a service that receives a request from an keycloak-authenticated-user (from the ActiveDirectory-Provider) and do an AD-Impersonation?

Thanks for your help and regards,
Alex