WebSphere to support Simple and Protected GSSAPI Negotiation Mechanism (SPNEGO)

At last, IBM added out of the box support for SPNEGO (SSO with Windows domain) for its WAS platform.
BM adheres to the WS-Security specification and the Web services Interoperability Basic Security Profile—a set of open Web services specifications that provide security for key infrastructure technologies such as SOAP messaging, the transport layer, etc. Additional security improvements include a trust association interceptor (TAI) that uses the Simple and Protected GSSAPI Negotiation Mechanism (SPNEGO) to provide an integrated single sign-on environment with Microsoft Windows 2000 or 2003 Servers. HTTP users log in and authenticate only once at their desktop and are subsequently authenticated (internally) with WebSphere Application Server.
Article link