Connecting to MSSQL Server Remote Management via Gateway, with Integrated Security

I'm attempting to set up entries to connect to our MS SQL servers using the in-built entry type in RDM (verrsion 2025.3.39.0), going via our Devolutions Gateway (version 25.3.3).
Currently the setup is as follows:

• Entry is set up to use a Gateway Tunnel
• Entry has a hostname of 127.0.0.1 with the port that the tunnel is using
• Entry is configured with "Integrated security (Active Directory)" as the "Login mode"
• Credentials are set to "Inherited" (at the top level of the vault credentials are linked to a user's own AD username and password which are stored in their User Vault)

When I attempt to connect, the tunnel connects, but the SQL connection failed with "The target principal name is incorrect. Cannot generate SSPI context".

Our end-users are not logged onto their laptops with domain accounts.

Is the issue something to do with the double-hop that we're attempting? (I.e. from RDM to the Gateway, then from the Gateway to the SQL server?)