ACS -SecurID and Active Directory SSO

[jarvoy]

I just installed a 3000 concentrator, ACS and RSA Securid. The concentrator points to ACS as an authentication server. RSA is configured as an external database to ACS, User is defined on ACS with the thier password authentication set to "RSA SecurID Token Server". Everything works great, when a user hits the concentrator they log in with two factor authentication granting them VPN access to our network. But they also need access to Active Directory resources....which require another login. Is there a way to setup ACS so this second login does not happen? Some sort of SSO? Thanks.

[gfullage]

No. This really has nothing to do with ACS, it is your Windows OS requesting access to resources that require authentication, just like if it was sitting on the local network. You can forget that you're connected in over a VPN at all, cause as far as your Windows OS knows it is just trying to connect to a network resource, it has no idea that it's getting there over a VPN tunnel. This really has nothing to do with ACS or with the VPN3000, so no way around it.