This requires
atoti.SecurityConfig.main_sso or atoti.SecurityConfig.xmla_sso to be an instance of KerberosConfig.See also:
ldap for a similar usage example.