Implementing SSO *into* Portal/LSF9

Hello all,

We have an internal portal that offers SSO to some of our company's applications, and we would like to offer SSO into the Lawson Portal.  From what Lawson has told me, they do not support this, though some clients have implemented their own solutions (for example I think Microsoft is using SAML to get to the Portal, but I could be wrong).  I can do a form POST to SSOServlet passing _ssoUser, _ssoPass, _ssoLogin, _action (LOGIN), _fromLoginPage (false), _language, _serviceName (SSOP), and _ssoOrigUrl, however I will not have my user's password.

So in attempt to figure this out, I have been following trace logs of the Portal.  I noticed I can drop in my own AuthenManager by setting the JVM property com.lawson.ios.authen.manager to point to my own class, but I was only successful in breaking the Portal.  My hope was to implement an AuthenManager (or something else?) that pulls our SSO ticket from our internal portal (via form POST), validates it, and then does whatever the Lawson Portal needs it to do for it to think it has already completed login.  Has anyone done something like this that can share some details or point me in the right direction?

"Portal 9.0.1.9.415, Technology 9.0.1.9.419"

Note:  I'm a Sr Java developer and have integrated SSO with other products that don't "support" it.

Thank you!