SSO and MS ISA

Has anyone successfully used SSO in Big IP APM to successfuly cache domain credentials so when (for example) opening a network access tunnel and then trying to access the internet via a proxy (an MS ISA proxy) the normal AD authentication pop up from ISA is then bypassed?