Just stumbled over this new article on the developerWorks site on how to configure SPNEGO for Lotus Connections to allow SSO for Windows users. Should be an interesting read. For more information see Configuring single sign-on for IBM Lotus Connections in the Kerberos environment on the site.