Kerberos Web Auth Flow

I’m trying to implement Kerberos SSO (SPNEGO / Integrated Windows Authentication) for a web application in an Active Directory environment.

I’m also testing this with a web application running behind OpenShift (ingress / routing layer), and I’m running into intermittent authentication issues that I cannot isolate.