Plone 5 SSO with AD

Plone Support Add-on Development
1

What is a decent solution for performing single-sign-on with Plone 5 against Active Directory?

Is it netsight.windowsauthplugin as described here

or is there a better way?

-aj