We have an intranet based on Sharepoint 2010. In this intranet we have several links to other webservers within the same Active Directory, for example a link to our Outlook Web Access site on our Exchange 2010 environment.

We have three different setups which visit this Sharepoint environment and the other webservers:

• Windows 7 clients that are a member of the Active Directory
• Home pc's that connect through a SSL VPN appliance
• Standalone thin clients (Windows 7 embedded) within the corporate network

The goal is to let people only sign in once. In the first group this isn't a problem because the AD Integrated Authentication works fine and the Windows logon is passed on to Sharepoint and the other webservers.

The second group is also working fine because of the LDAP integration that the SSL VPN appliance uses.

The third group is however experiencing issues. They need to enter their credentials everytime they click a link to another webserver. They first need to enter credentials for accessing the Sharepoint environment. When clicking the link for their webmail they have to re-enter their credentials, and so on.

Can someone tell me what the best solution would be to also get SSO working fine for the third group? Some extra information: We also have a Forefront TMG server in our environment. I read somewhere that Forefront might be part of a solution for this problem, but not sure how. Maybe someone here can help me?

Look forward to some help.

Best regards,

Aico