I was able to make Chrome delegate a GSS Credential. In Chrome for Windows, it required using the windows registry editor. http://dev.chromium.org/administrators/policy-list-3#AuthNegotiateDelegat... -----Original Message----- From: keycloak-user-bounces(a)lists.jboss.org <keycloak-user-bounces(a)lists.jboss.org&gt; On Behalf Of Chris Smith Sent: Thursday, January 31, 2019 2:11 AM To: keycloak-user(a)lists.jboss.org Subject: [keycloak-user] GSS Credential delegation works for Internet Explorer but not for Chrome? I have Keycloak setup to authenticate to an Active Directory domain using LDAP/Kerberos I have set Windows Internet options for SSO Both Internet Explorer and Chrome successfully perform Authentication. I have a requirement for a Delegated GSSCredential and have configured Keycloak and my Active Directory domain controller to perform this task When I run my web app using Internet Explorer as my browser, in the servlet I successfully get a Delegated GSSCredential from the Access Token. When I run my web app using Chrome as my browser, in the servlet I fail to get a Delegated GSSCredential from the Access Token. Why the difference and what do I need to set to allow Chrome to be used as a fully supported browser? _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user