The POST /{{envID}}/flows/{{flowID}}/kerberos operation initiates an action to allow users to sign on using Kerberos authentication. This operation uses the application/vnd.pingidentity.kerberos.lookup+json custom media type as the content type in the request header.
See Flows for important overview information.
Set up an LDAP Gateway with Kerberos authentication enabled. See also Gateway Management.
Add this LDAP Gateway to the Create Sign-On Policy Action (LOGIN). See also the Sign-On Policy Action data model for LOGIN.
The flow response will then include the kerberos.authenticate action.