I am reading the Plan for Kerberos authentication in SharePoint document by Microsoft.
I have read it and several additional documents, and I am hoping someone can tell me whether I have gotten this particular use case correct.
I understand that Kerberos is more secure. I understand that it require less traffic than other secure authentications. I understand that it is open.
I am trying to clarify the delegation of credentials. Is this a good description of where the Kerberos ticketing system is better than the classic authentication?
A user is trying to access an SQL Server database by logging into a desktop,
going to a SharePoint web page, and then through an Excel data connection to a SQL
Server database. The user’s credentials could get to SharePoint, but the classic authentication does not
support passing the credentials through the Excel data connection to the server to
obtain permission to read or update the database.









