SSO in CSF

hi,

Is SSO using the identity manager limited to only usernametoken/kerberos or CA cert can be used too The topic "Using secondary credentials" appears to indicate only the above two options

thanks