Create Service Principal Names

Find the SharePoint application pool identity and port.
Create a Service Principal Name (SPN) for each web application that needs to be shared as follows:
setspn –S HTTP/SPHOST:PORT <domain>\AppPoolUser
setspn –S HTTP/SPHOST.FQDN:PORT <domain>\AppPoolUser
setspn –S HTTP/SPHOST <domain>\AppPoolUser
setspn –S HTTP/SPHOST.FQDN <domain>\AppPoolUser

If the port is a default port, such as 80 or 443, omit the commands that include port above. Some of the lines only require a host name while others require a fully qualified host name. If the application pool identity is for a built-in user such as Network Service, then specify the host name as shown below instead of <domain>\AppPoolUser.

setspn –S HTTP/SPHOST:PORT <domain>\SPHOST
setspn –S HTTP/SPHOST.FQDN:PORT <domain>\SPHOST
setspn –S HTTP/SPHOST <domain>\SPHOST
setspn –S HTTP/SPHOST.FQDN <domain>\SPHOST

If you use SSL, the SPN must refer to HTTP instead of HTTPS.

Add Kerberos constrained delegation in Microsoft Active Directory for Microsoft SharePoint.