Fortigate - Explicit proxy with Kerberos

[kamarale]

Hello,

I have a question about kerberos authentication. Seeing this doc:

https://community.fortinet.com/t5/FortiGate/Technical-Tip-FortiGate-explicit-proxy-authentication-wi...

Why do I need the kerberos authentcation? I mean what would be the difference if I do not configure the kerberos part and I do configure the rest (LDAP,groups, and add group to proxy policy)?

If I do not configure the kerberos part I would still have the active authentication (autentication windows popup on browser) the a user tries to go to internet,right?

I do not the benefit added with kerberos. Is it to just add SSO like authentication (passive authentication) ??

I am new to kerberos protocol...

thank you in advance.

Regars!