NTLM pop-up after successful authentication.

We are trying to develop a APM policy that allows domain joined computer to use a kerberos ticket to login to a SAML based intranet website.   Currently the login to the SAML based intranet websit...