SSO login failed by NWBC or ICF services

Hi all,

we are implementing a Single Sign-On 1.0  using kerberos token from Microsoft AD, it work fine by saplogon (AS ABAP- ECC, Solman, GRC NF-e and AC ) and by browser NW CE 7.2 ( AS JAVA- IdM7.2 and SSO 1.0) .

During logon by NWBC or other called ICF services by browser, the SSO doesn't work requiring a logon screen . We expected that a SSO working fine and login without require user and password on this cases .

If we are enter a user and password on this problem case, the https is  working fine, but we need an automatic login by SSO using kerberos as we set by spnego, SU01 tab SNC and EXTID_DN .

Are there any parameter that we have to set on icf services or RZ10 to provide SSO login to solve this issue ? 

Thanks in advance,
Rodrigo