Kerberos-based authorization allows you transparently (without requesting credentials) authorize users of Active Directory domains, i.e. organize Single Sign On (SSO). When the Kerberos-based authorization is used, the UserGate server communicates directly with your domain controllers.