Kerberos delegation

Kerberos delegation enables a service to access resources on another server (e.g. web server would want to access a SQL server).

Types of delegation:

• unconstrained delegation
• constrained delegation
• resource-based constrained delegation