Jabber SSO for PKI / Kerberos LogOn via Card&fingerPrint

Question

Is there any solution (existing or planned) for Jabber SSO when users are not using UserName/Password identification when they are logging in to their PC ?
Instead they are using a PKI / Kerberos LogOn via Card&fingerPrint ? and for this LogOn method once opening Jabber Client how can they be LoggedOn without any need for further identification?

Answer 1

Hi Andrzej Kazmierczak,
Thanks a lot for the reply,
If we configure certificate based authentication in IIS (certificate mapping) it doesn't use kerberos provider (at least that's what I have seen through network monitor captures).
guess probably the presentation of intent in my question was wrong.. my bad..sorry
My requirement is to configured the SSO environment based on "kerberos Authentication" (where the pre-authentication happens not via user name and password but through USER IDENTITY certificates.)
http://msdn.microsoft.com/en-in/library/cc238455.aspx
When smart cards are implemented with kerberos, pre-authentication (for kerberos) happens through KDC validating the smart card PKI certificate (x.509), I want to achieve the same thing in my lab without smart card (i.e.. only with user identity certificate
installed over a device).
There are few related information  available over the web but for Linux based (MIT kerberos) environment. However according the document available in the link(http://msdn.microsoft.com/en-in/library/cc238455.aspx), it should be possible even in Microsoft
environment.That's exactly is my requirement.
I am very new to  kerberos topic, please correct me if my implementation understanding is wrong somewhere.
Thanks,
GK