Exactly, BYOD setup. As I hinted, single organization and several independent people working together with their private laptops, using several on-premises services and right now, way too many passwords.

Towards AD, I'm kind of ambivalent. However, it's all or nothing approach is not suitable right now. What I need now is just the Kerberos, and the willingness of the apps to use it.