Blog Post

ITOps Talk Blog

6 MIN READ

Deep dive: How Azure AD Kerberos works

Microsoft

Jan 25, 2022

If you have ever explored the differences between Active Directory (AD DS) and Azure Active Directory (Azure AD), you would have found that Azure Active Directory doesn't support the Kerbe...

Updated Nov 28, 2023

Version 2.0

Microsoft

Joined August 02, 2018

View Profile

ITOps Talk Blog

Follow this blog board to get notified when there's new activity

testuser7

Brass Contributor

Feb 16, 2024

SoniaCuff I have a basic academic question.

When I unlock my AAD-joined Windows 10 device and obtains Cloud-TGT along with PRT, if I have unlocked my device with Windows-hello, would cloud-TGT has that information stamped in it.

The reason is, later on when device goes to Azure-AD Kerberos to get the service-ticket using cloud-TGT, if that registered-app (representing that service) is under MFA, the cloud-TGT stamped with MFA should fulfill that requirement.