Book: Security Architecture Revision: n_1415923_security-architecture_version_6.4_edition_1.0_release_0-revision_1 Section: 7.2. How it works Issue description: There is a table "4.9. idp-domain Users", with 2 issues in the section "Using Desktop SSO (via Kerberos) to Provide SSO for Web Applications": - It's without description what the "idp-domain" means for this section - There is a "Roles" column in the table, but the Kerberos authentication doesn't contain information about roles. It should be described where the values come from. Suggestions for improvement: - Describe what means idp-domain in section "Using Desktop SSO (via Kerberos) to Provide SSO for Web Applications" - Describe where Roles come from in this example.