Thanks for answering my questions. Think I'll stick with using stock SSH since it will use existing host keys. I was able to get SSO working by using the info in KB-2841. Since AllowGroups works for local and AD groups, it's sufficient for my needs.
↧