Hi,
I'm dealing with exactly the same problem.
My company is moving to PKI (Login with smart cards). In this authentication type, users will not know their Active directory password, and authentication to QC should be with SSO.
I'd appreciate to know how did you deal with the situation?
Thanks