Is Kerberos delegation possible with clientCertificateMappingAuthentication enabled? Can anybody confirm or deny that it works?
I've found an old post reporting a very similar problem to what I'm having right now. But it's not clear if the problem has a resolution or this is an unsupported configuration.