Kerberos Constrained Delegation for SPNEGO 1.0

This feature enables support for Kerberos constrained delegation for SPNEGO.

Enable this feature

To enable the Kerberos Constrained Delegation for SPNEGO 1.0 feature, add the following element declaration into server.xml, inside the featureManager element:

<feature>constrainedDelegation-1.0</feature>

Feature configuration elements

• constrainedDelegation

Liberty API packages provided by this feature

• com.ibm.websphere.security.s4u2proxy

Features that this feature enables

• appSecurity-2.0

Supported Java versions

• JavaSE-1.8
• JavaSE-11.0
• JavaSE-17.0
• JavaSE-21.0
• JavaSE-24.0

Develop a feature that depends on this feature

If we are developing a feature that depends on this feature, include the following item in the Subsystem-Content header in your feature manifest file.

com.ibm.websphere.appserver.constrainedDelegation-1.0; type="osgi.subsystem.feature"