Goal:
Login to your Windows Client and do not have to login to Connections
Motivation:
Sure you can configure SPNEGO directly in WebSphere. But you might want to support OTP/WebAuthn for external users which are not in your AD?
This is a companion discussion topic for the original entry at https://www.ume.li/blog/2022/12/23/keycloak-and-kerberos/