title: Use Windows Authentication with OAuth 2.0
body: <p>I have set up an OWIN authorization server and several resource servers exposing ASP.NET Web APIs.  I am serving up a JWT from the authorization server that is specific to each resource server (the idea being that each resource server needs custom claims wrapped up in its token).</p>
  
  <p>These servers are all in an intranet environment where we historically have used Windows Authentication (Kerberos) to provide a single sign-on experience.  This feature has been lost in my implementation because I am using the user's username and password (authenticated against AD) to grant a token.  What I am wondering is if there is a way to get a single sign-on experience back - maybe by using Windows Authentication to establish the identity of a user before granting them a token? </p>
  
  <p>I feel like this is somewhat unorthodox and might be dumb - so please tell me if there is a better, alternative approach to getting SSO with OAuth 2.0 in an intranet environment.</p>