Constrained Delegation with S4U2self

This figure contains three icons that represent Duke, Impersonator, and Backend Server. Enterprise Network consists of Impersonator and Backend Server. A crossed-out arrow labeled "No context established" points from Duke to Impersonator. An arrow labeled "Pretends to be duke" points from Impersonator to Backend Server.