I would like to have the ability to do kerberos authentication via the webUI, bot just entering the kerberos password but actual SSO authentication via the webUI wherein a user with a ticket is automagically logged into satellite with the appropriate credentials. 

Kerberos is becoming a larger and large part of many organizations infrastructure (whether they realize it or not, Active Directory) and being able to use this to enable single sign on to satellite would be a great asset. Even ith your own IPA server this would be a useful feature.