Hi Ben,
This is a new requirement and change to plan for Interconnect 1.1.0 release that was raised in the PM meeting on Dec 11, 2017. Jack said that he raised this issue with Eng during the planning process, but they did not think any doc was required ? or something.

From what I heard in the PM meeting, this functionality is supported/achieved via Cyrus/SASL config of servers for GSSAPI. I inquired to see if this is the same requirements as:
https://issues.jboss.org/browse/AMQDOC-2705
but no confirmation/denial. Ted was not on the call today.

Here's a link from Michal T. for a Kerberos config write-up he did recently:
https://bitbucket.org/msgqe/dtests/src/440c6342277d76ce21258f385cbf53f681cd3bcc/dtests/node_data/gssapi/msgqe.com/?at=mt_gssapi

And I guess the config procedure would be very similar to if one were doing this on Qpid Proton. I'm adding Ted and Gary Tully as Need Info on this JIRA. I'll get this clarified as quickly as possible.

Thanks,
Susan