As an end user, once I successfully logged into one app on my device, I want to be logged in another app (on the same device) that uses the same IAM server, without having to re-enter my credentials. Further, I want to access the functionality (of the app) to which my role is authorized.

Require Support for SPNEGO SSO. Reference: http://www.oracle.com/technetwork/articles/idm/weblogic-sso-kerberos-1619890.html

Certify this use case with:
1) MS Active Directory: Kerberos + LDAP
2) RHEL IdM: IPA Kerberos Server + Red Hat Directory Server