Need help with kerberos delegation

Better to follow this soln. https://support.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-sso-config-11-4-0/4.html

The steps to create delegation account

https://support.f5.com/kb/en-us/products/big-ip_apm/manuals/product/apm-sso-config-11-4-0/4.htmlunique_716053090

There is no reference to Virtual server created on APM. When APM connects to the back end server IP address, it uses the PTR record to find the corresponding SPN. This is provided you leave 'SPN Pattern' under kerberos SSO screen empty

You can enable debug for sso, cli using

tmsh modify sys db log.sso.level value debug

Let us know how it goes..