app-sso is used to control and get information about the Kerberos Single Sign-on (SSO) extension via the command line. The Kerberos SSO extension simplifies using Kerberos authentication with an Active Directory based Kerberos realm. It also allows the user to use Active Directory specific functions such as password changes and password expiration notifications.