This mode supports single-sign-on (SSO) and also allows you to use Crowd groups for authorization. For example, you can say "everyone in the 'developers' group will have the administrator access".
Crowd overview of SSO Crowd configuration documentation Adding an Application in Crowd.