Explanation/Reference:
* In Central Administration, you can only configure claims-based authentication when you manage web applications. You can also use Windows PowerShell In the Claims Authentication Types section, select the authentication method that you want to use for the web application.
To enable Windows authentication, select Enable Windows Authentication and, in the drop-down menu, select NTLM or Negotiate (Kerberos). We recommend using Negotiate (Kerberos).
If you do not want to use Integrated Windows authentication, clear Integrated Windows authentication.
Reference:https://technet.microsoft.com/en-us/library/ee806885.aspx
Use the Convert-SPWebApplication cmdlet to convert the authentication mode of a Web application to Windows Claims authentication mode and migrate the user accounts in the content database to claims encoded values.
Reference:https://technet.microsoft.com/en-us/library/jj219696.aspx
New-SPWebApplication -Name <Name> -ApplicationPool <ApplicationPool> -AuthenticationMethod
<WindowsAuthType> -ApplicationPoolAccount <ApplicationPoolAccount> -Port <Port> -URL <URL> Reference:https://technet.microsoft.com/en-us/library/gg276326.aspx