I have a Java application that uses the username from the NTLM auth header for SSO (not too secure, but hey, it's an intranet app) - see here. However, it ...