Plone 5 SSO with AD

What is a decent solution for performing single-sign-on with Plone 5 against Active Directory?

Is it netsight.windowsauthplugin as described here

or is there a better way?

-aj

Plone Foundation Code of Conduct