A browser only allows Kerberos authentication if it is a trusted site. Browsers do not always support SSO on the same server as the webserver. They will fall back to normal login with login dialog. If you encounter this try login from a different machine