fablaga,
If you are using tomcat then you have to use Kerberos or put IIS in front of Tomcat to use WinAD.
I have only gotten SSO to work with the IIS + Tomcat route.
Here is a thread on setting up Kerberos and some on SSO:
https://bobj-board.org/t/76723
GigaGuy (BOB member since 2007-02-13)