Palo Alto Networks firewalls and Panorama
support
Kerberos V5
single sign-on (SSO) to authenticate administrators to the web interface and
end users to Captive Portal. With Kerberos SSO enabled, the user
needs to log in only for initial access to your network (such as
logging in to Microsoft Windows). After this initial login, the
user can access any browser-based service in the network (such as
the firewall web interface) without having to log in again until
the SSO session expires.