Does this finally provide seamless passthru authentication or does the end user still need to provide their AD credentials to log in?