Lets say a company uses a centric user management system, (I believe LDAP is required for this), and already has several apps configured to do Single Sign-On (SSO) including the intranet and several other apps.

I would like to know if it is possible to extend the SSO capability to include CLM, so with one login to the internal system, we wish to enable automatic logging into CLM products like RTC.

At this moment I think from version 6 onwards, Kerberos/SPNEGO SSO is the only likely candidate with the potential, but there is limited documentation and blogs to confirm if it is really possible. (And the setting up process seem extremely complicated to 'just try' if it works). There are some relevant documentation below.

Question:
Q. Is it possible to achieve Single Sign-On for RTC/CLM with company's internal user authentication?
Q. Has anybody achieved it? Or any specific documentation?
Q. If possible, is Kerberos/SPNEGO SSO the only way? With the following pre-conditions:

• Microsoft Active Directory running on Windows Server 2008 R2 or later
• IBM® WebSphere® Application Server Version 8 or later

Any other relevant information would be massively appreciated.

Information I read:
"Kerberos is a well-established SSO protocol that is also the default authentication protocol used by Microsoft Windows, so if your organization uses Windows workstations, Microsoft Active Directory for user management, and deploy Jazz applications in WebSphere 8 or later, it will be possible to configure CLM so that your Windows login session is automatically used to log in to CLM. Kerberos can also be used with non-Windows workstations, as long as you use a Microsoft Active Directory server to manage your user accounts."
New single sign-on options in CLM 6.0

Single sign-on authentication in CLM

Supported platforms for Kerberos/SPNEGO SSO authentication

Configuring Kerberos/SPNEGO single sign-on authentication