Allow OAuth2 login to delegate to Kerberos protected resources

Question

I would like to build a Web API in Python that uses OAuth2 and will eventually use Kerberos protected resources in the backend. Specifically, I would like to have a Web API that uses OAuth2 to authenticate user and then switch them to a Kerberos context for the duration of the request. (I am not too familiar with Kerberos which may be apparent.) Many users with different credentials will be using the same API. It should be noted this will be done in a Linux environment with some implementation of Kerberos. I want to use OAuth2 from authorization because it will be easier for developers to use API.

How can I delegate or impersonate a Kerberbos user that was authenticated using OAuth2? I am aware I can make any necessary information available to the Web API in the OAuth2 authentication token(jwt). Furthermore, I could have OAuth2 server have a token introspection method that would allow me to obtain any info needed to make the impersonation.