Support for single sign-on with proxy user authentication