title: Is it possible to obtain a kerberos ticket for a domain user from a device that is outside the domain?
body: <p>We have devices outside the domain and we don't want them to be inside. But we are trying to go with kind of SSO in theese devices when they are in the corporate network.</p>
  
  <p>So, in order to do that we saw that Azure can do something similar with its Windows10 devices.</p>
  
  <p><a href="https://docs.microsoft.com/en-us/azure/active-directory/devices/azuread-join-sso" rel="nofollow noreferrer">https://docs.microsoft.com/en-us/azure/active-directory/devices/azuread-join-sso</a></p>
  
  <p>Is there any way to do such from a Windows 10 using powershell or cmd? Obtain the kerberos ticket and use it to SSO</p>
  
  <p>Thanks!!</p>