Can we get a little more information on how SSO will be used in this design?
Are the links internal using the same authentication store?
Where are the links located? Are they presented on a page hosted by an internal web server or APM Webtop (V11)?
Will they "proxy" through APM using "Portal Access" or will the links take you to a different VIP?
APM can perform this function however it is important to understand the details around how the user is authenticated to the other applications, where they terminate, and to understand the overall design.