unconstrained delegation with Kerberos

Showing results for 
Search instead for 
Did you mean: 

unconstrained delegation with Kerberos

Hi everyone, 

I've tried to setup SSO Kerberos with Alfresco. My problem is that on step 4 of the official documentation it is written :

"In the Delegation tab of the Properties of the user account created in the first step, tick the Trust this user for delegation to any service (Kerberos only) checkbox."

If i understand correctly, this is unconstrained delegation and it is a big red flag for our security team. 

I was wondering are there any workaround or any success alternative with kerberos ? 

Thank you for your time.