The concept of authenticated delegation is not new. Practical authentication for distributed computing . It is intended to be portable across UNIX, TCP IP platforms. The authentication service is based on global principal identities, whereby user and server principals have a single name used for authentication. Global principal names are independent of the account name or host name where the principal is operating.
Authentication is the most basic, as well as the most studied among the four problems.
Its main issues are fairly well understood. In particular, it provides constructs for explicitly stating inheritance and defaults. Authenticated delegation is not new. Our study of authenticated delegation is for authorization. Practical authentication for distributed computing .