It is a wonderful article . I have some doubt . Assume There is parent.com and There is parent.child.com . Both have parent and child trust configured. There is a user childuser in parent.child.com. I have to delegate it to a constarined delegation user (kcduser ) which is in parent.com . Resource who is sitting in the parent.com . As Referring your article , I need to get TGT ticket from parent.com (where kcduser and Resource is available) to access parent.child.com . I need your input to confirm my understanding on this scenario . Thanks Rajesh ... View more