We have implemented SSO using SPnego and it works fine but we have a couple of issues. The first one concerns to the mail notification associated with the subscriptions. When somebody receives a mail and click on the link the SSO does not work. Is it necessary to create a SevicePrincipalName with the mail server?
The second issue is with the special Characters in the name. I mean for users with Ñ in the name it does not work. At the very begining I thought the problem was related with the GSSA-API but we also had implemented SNC with other SAP System based on Windows and it works.
Some ideas??