What are the client trust settings required to change the redirect URL for captive portal with Kerberos SSO?

What additional settings are required to change the redirect URL for the captive portal with Kerberos?

• Palo Alto Firewalls
• Windows Server
• Kerberos SSO Authentication

1. To change the redirect URL for a Palo Alto captive portal, navigate to Device > User Identification > Authentication Portal Settings.

2. Within the settings, modify the "Redirect Host" field to the desired URL, ensuring it matches the hostname used in your certificate's Common Name.
    

        Here are the additional changes requested when using a captive portal with Kerberos SSO :

3. Add the new redirect URL to the sites within the Intranet and Trusted sites zones. For security reasons, Edge only allows Kerberos delegation to sites within the Intranet and Trusted Sites zones.
    
   
   
4. Add the new URL to the following two locations through a group policy update: --
   1. Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\AuthServerAllowList
   2. Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome\AuthServerAllowList 
      
      

• Microsoft Edge - Policies
• Configure authentication portal