188.8.131.52.3.6 PAC_CLIENT_CLAIMS_INFO Structure
If ClaimsCompIdFASTSupport is set to:
1: If a PA-PAC-OPTIONS  (section 2.2.10) PA-DATA type with the Claims bit set is in the AS REQ, the KDC SHOULD behave as noted in the next step, "2 or 3". Otherwise, the KDC SHOULD NOT provide a PAC_CLIENT_CLAIMS_INFO structure ([MS-PAC] section 2.11).
2 or 3: The KDC SHOULD<55>
Add a PAC_CLIENT_CLAIMS_INFO structure as follows:
The Claims field SHOULD be set to the ClaimsBlob.
For KILE implementations that use an Active Directory for the account database, KDCs SHOULD retrieve the claims from the local directory service instance with the same processing rules as defined in GetClaimsForPrincipal() ([MS-ADTS] section 184.108.40.206.2.1) message processing. The KDC populates the returned PAC_CLIENT_CLAIMS_INFO structure fields as follows: