There is a LOT of great information on how to configure SSO for SharePoint. If you are still jaded because of the limited capability of SSO in 2003, you have to take a fresh look at SSO in 2007. As far as I can tell the service has not changed substantially (if at all). The biggest change is that SharePoint Designer now understands SSO and you can use it for your Data Form Web Parts and the BDC.

With that in mind I was configuring SSO and kept running into the error message:

Login failed for user 'NT AUTHORITY\ANONYMOUS LOGON'

What?

I double check everything under my control. This was a medium farm environment, so there are a bunch of places to check, but everything was right. On a hunch I asked about the group that IT provisioned for me. Turns out the SSO Admins Group that was provisioned for me was not a Global Group (it was set as Universal). Changing the group to Global made everything work.

Anyway, here are some great resources in your quest:

TechNet: Configure Single Sign-on

Brett Lonsdale’s Blog: SSO is So Easy

Dave Wollerman’s SharePoint Blog: SharePoint 2007 Single Sign-On Setup