In general, Pyramid does NOT require complex configurations for Kerberos and delegation. However, this configuration is required in certain scenarios when working with a combination of Windows Active Directory; Windows Authentication single-sign-on;and the need to connect to data sources using Windows authentication or "tokens".
The setup and maintenance of Kerberos and Delegation can be complex and hard to implement and maintain. It requires deep expertise and knowledge by system administrators and should be avoided unless the deployment strategy absolutely demands it.
This guide is designed to help you configure Kerberos delegation with Pyramid and the matching data sources.