APM SSO - Kerberos double hop delegation issue

Hi,   We are using APM per-app vpn for allowing mobile devices to access internal applications via VPN. Authentication is based on username/password and device certificate.   Some applications ...