The user enters his Active Directory username and password, AD Group Manager Web authorizes them against the specified AD domain.
The browser authorizes the user using the Kerberos protocol. Follow this instruction to turn on Windows authentication.