123506 NTLM SSO with IIS and PHP

We are using the Bitrix Site Manager CMS. [login to view URL] It is a PHP CMS with quite an extensive and well documented API. [login to view URL] There is a very good LDAP authentication module within BSM that connects to our Windows 2003 Active Directory server and authenticates a user against that. If a user is not already within the BSM user database but found in the AD, they are created within the BSM user database. This works well, but requires all users to authenticate into BSM using their AD credentials, even if they have previously been authenticated. We have two websites handled by BSM, our public Website is served by Apache and it is fine to get the users to login using a form. Our private intranet is handled by IIS. IIS authenticates the user using NTLM authentication. This means that the username is passed to IIS which in turn makes the $_SERVER["AUTH_USER"] variable available to scripts. We need to check for the presence of the $_SERVER["AUTH_USER"] and if it is available the user has already been authenticated and the user should be passed as 'logged in' to BSM and let BSM handle the access control. If the $_SERVER["AUTH_USER"] is not available, the user needs to log in using the normal BSM form based mode. I already have a script that gets the $_SERVER["AUTH_USER"] variable from IIS. You can use this as a starting point/example or you can start from scratch. You will need to install BSM on your windows machine with IIS for development (there is a 30 day fully working demo) . Our server is a production server and development on it will be available for limited testing. I anticipate this is not as complex as it sounds because all the pieces are in place, your job is to link them up. I will give preference to a programmer who has worked with Bitrix and/or has experience with IIS and NTLM authentication on Windows machines.