(DOCSP-25712): Re-add Kerberos auth behavior (#433)

* (DOCSP-25712): Re-add Kerberos auth behavior

* formatting

* remove unneeded admonition

* line formatting

* wording

Author: jeff-allen-mongo

source/connect/authentication-connection.txt

@@ -153,6 +153,32 @@ Procedure
          * - (Optional) Provide password directly
            - Used to verify your identity. 
 
+      Authenticate as a Different Kerberos User on Windows
+      ````````````````````````````````````````````````````
+
+      When you authenticate with Kerberos on Windows, the
+      :guilabel:`Principal` you specify must match the principal of the
+      security context that |compass-short| is running. Normally, this
+      is the logged-in user who is running |compass-short|.
+
+      To authenticate as a different Kerberos user, run |compass| as the
+      chosen user and specify the :guilabel:`Principal` for that user.
+      To run |compass| as a different user, either:
+      
+      - Hold :guilabel:`Shift` and right-click the |compass| program
+        icon to select :guilabel:`Run as a different user`.
+      
+      - Use the ``runas`` command-line tool. For example, the following
+        command runs |compass| as a user named ``admin``:
+
+        .. code-block:: sh
+              
+           runas /profile /user:mymachine\admin <path to MongoDB Compass>
+
+      After you start |compass| as the chosen user, to authenticate
+      against your Kerberos-enabled MongoDB deployment, specify the
+      :guilabel:`Principal` for the corresponding user.
+
       .. _ldap-authentication:
 
       LDAP