The popup issue appears to be a client build, tried with a non customer laptop and the window popped up without a hitch.
I have a second more pressing issue and probably worth a separate discussion, but the customer has two AD's which I have established a two-way trust between and authentication works.
However, we were performing role mapping based on AD groups. I have had the lookup server working on the initial AD but there is no obvious way to specify a second LDAP server.
If it is not possible to have two separate LDAP queries, would converting to RADIUS(ACS) as an authentication service be the answer, however, we do want SSO capability so is RADIUS and SSO compatible?
I will try it in the mean time.
Many thanks in advance