Cockpit now supports single sign on authentication via kerberos,
including Active Directory and IPA domains.
The initial support is included in Cockpit 0.25. Further work will be
merged in the new few days related to delegating credentials when
Cockpit connects out to other machines.
If you want to try it out you can get a Fedora build here:
Or the source build here:
SSO documentation here: