You’d need to explore the GSSAPI extensions, probably with ECP. I have no idea where that all is, but last I looked the IETF RFC was still kicking around.