Providing SSO across applications deployed on heterogeneous platforms can lead IT organizations to implementing a complex set of interconnections between disparate solutions that are fragile and not easily adapted to support emerging technology and devices such as smart phones and tablets. This can become increasingly problematic for organizations seeking to deliver on the promise of IT as a Service (ITaaS). This paper examines how to implement Kerberos-based single sign-on with Active Directory across heterogeneous applications, while simultaneously providing flexible and highly scalable web access management.