Mix NTLMv2 & Kerberos SSO in the same policy for different sub-URL

Hi, 

- Review the Active session report for the first login attempt and validate that Kerberos works well and you can see the TGT or S4u Successful.
- After the first attempt try to logout again and authenticate with another user and review Access report and check the NTLM authentication and Kerberos. 

- Try this ( don't only logout from the application , I need you to kill the session then authenticate with the second user directly and check kerberos logs in the access reports ) 
I think you should connect to the second user after killing active session.

Don't forget to enable debugging for SSO and Access policy , to be able to see all logs and failures on Kerberos side.