Server Configuration > Post Install Server Security > Special Considerations for Kerberos and Kerberos Single Sign On > Setup for Web Interface
  
Setup for Web Interface
The Web interfaces do not support security schemes using the Windows SSO security realm; however, if you specify multiple security schemes that use both the Windows and Windows Single-Sign on security realms, the Web interfaces default to the Kerberos authentication domain when you log in, because Windows uses Kerberos by default.
You can specify multiple default security schemes that use both Windows and Windows SSO security realms, or specify a security scheme that uses Windows for individual client machines and a security scheme that uses Windows SSO as the default scheme.
* 
In the security.properties file, a windows or windowsSSO security policy uses the Kerberos authentication domain.