I'm one of the SAP administrators for our organization and we've got some internal web applications that use Kerberos for SSO. Now the powers that be would like some of these exposed on the Internet.

I'm swallowing my pride and admitting I'm a bit out of my depth here Help me, O Hivemind! Helping someone out with a design scenario here. It's a largish O365 (primarily email) site, onsite DC and ...