Question: how kerberos authentication works browser?
Answer: To allow a browser to authenticate on a web server, the following conditions have to be fulfilled: ... A user must have access to the webserver; A user must be authenticated on his computer joined to the Active Directory using Kerberos (must have a valid TGT — Kerberos Ticket Granting Ticket).