[Zope] Single Sign on

I am currently building an intranet utilising Zope/Plone and plan on authenticating users via LDAP (ldapuserfolder). However I am now expected to implement a "single sign on" system for the company which currently uses NT domains to authenticate users. Has anybody had any experience in this? I'm beginning to think that it may be "easier" (short term at least) to just authenticate people via NT domain and drop the ldap. I will be very grateful for any advice. cheers David Orr Development Analyst Programmer Henry Walker Eltin email: david.orr@hwe.com.au