SMB is configured to retrieve claims on behalf of the user when claims are not provided by the user, but Kerberos authentication ...