This feature enables support for Kerberos constrained delegation for SPNEGO.

Enabling this feature

To enable the Kerberos Constrained Delegation for SPNEGO 1.0 feature, add the following element declaration into your server.xml file, inside the featureManager element:

<feature>constrainedDelegation-1.0</feature>

Feature configuration elements

Liberty API packages provided by this feature

  • com.ibm.websphere.security.s4u2proxy

Features that this feature enables

Supported Java versions

  • JavaSE-1.8

  • JavaSE-11.0

  • JavaSE-17.0

  • JavaSE-20.0

Developing a feature that depends on this feature

If you are developing a feature that depends on this feature, include the following item in the Subsystem-Content header in your feature manifest file.

com.ibm.websphere.appserver.constrainedDelegation-1.0; type="osgi.subsystem.feature"