&gt; In the mean time, we still have Kerberos (and HTTP Negotiate).<p>There&#x27;s also this implementation of Kerberos in client-side JavaScript:<p><a href="https:&#x2F;&#x2F;webathena.mit.edu&#x2F;" rel="nofollow">https:&#x2F;&#x2F;webathena.mit.edu&#x2F;</a><p><a href="https:&#x2F;&#x2F;github.com&#x2F;davidben&#x2F;webathena" rel="nofollow">https:&#x2F;&#x2F;github.com&#x2F;davidben&#x2F;webathena</a><p>HTTP Negotiate is also super messy in similar ways (For instance, I&#x27;m not sure how to authenticate using IE if your current Windows account is a local account instead of a domain one). It definitely works, but not well.