Kerberos and tokens

I am reading about Kerberos, and it seems to be mostly an encryption protocol.

Does it actually pass tokens, so that it can used one set of credentials to access another system), as OAuth and SAML can ?

If WS02 is a good choice for a IdP in SAML, what would b a good choice for a  IdP in Kerberos ?

Thanks

Thanks