Domino reads the information and uses it to authenticate the user with Active Directory, and then it sets an LTPA token for the user, providing authentication with Domino. However, if the HTTP header is longer that 16KB, this will fail, resulting in a status 400 error.