[keycloak-user] Clarification about Kerberos Credential Delegation

Hi all, I'm absolutely new to OAuth. I just read the docs about Kerberos (https://www.keycloak.org/docs/3.2/server_admin/topics/authentication/kerb...) and I am not sure if I understand correctly. Is it possible to own a service that receives a request from an keycloak-authenticated-user (from the ActiveDirectory-Provider) and do an AD-Impersonation? Thanks for your help and regards, Alex