caption: Kerberos delegation server allowlist
desc: |-
  Setting the policy assigns servers that <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> may delegate to. Separate multiple server names with commas. Wildcards, <ph name="WILDCARD_VALUE">*</ph>, are allowed.

        Leaving the policy unset means <ph name="PRODUCT_NAME">$1<ex>Google Chrome</ex></ph> won't delegate user credentials, even if a server is detected as intranet.
example_value: '*.example.com,foobar.example.com'
features:
  dynamic_refresh: true
  per_profile: false
future_on:
- fuchsia
owners:
- file://components/policy/OWNERS
- atwilson@chromium.org
schema:
  type: string
supported_on:
- chrome.*:86-
- android:86-
- chrome_os:86-
tags: []
type: string
