Yep, I ended up using centrall managed UDCX with SSO. Here's what I did:Enabled SSO through central admin websiteIn the SSO screen in central admin, created a new SSO application Created a single group mapping from the Domain Users group to a service account that had access to the web service.
Added the following tag to ...