Microsoft Forefront can be configured to use Echidna through a custom TMG authentication filter. There are some restrictions on the supported authentication delegation types (how the user identity or credentials are passed through to the protected application when needed). This is an inherent limitation in the TMG API.