Domain Controllers running Windows Server 2012 in the domain***While technically you'll need all the items listed depending on the scope, size, and complexity of your claims-based authorization deployment, you must have Domain Controllers running Windows Server 2012 in the domain that claims-based authorization is to occur in. Windows 8 clients are not required for this specific scenario and Kerberos is available by virtue of having Active Directory.