As you know, for Windows client Integrated Authentication in IBM WAS the mechanism called SPNEGO (The Simple and Protected GSS-API Negotiation Mechanism) is used.
Our BPM users can access to portals without input of username and password, using their Windows account.
I won't give a detail guide because the old guide you can find here
But there is not a way for clustered environments here what are used in productive most frequently.
I can fill this defect.
I describe the features for clusters.