Comment by folmar

Normal Kerberos. For SSO NTLM was a fallback with no SSO power only.