SSL Client Certificate Authentication allows users authenticate to TMG using smart cards. This post explains how to configure TMG and Active Directory for certificate authentication.
Weblog of Simon Simcic
Access to corporate resources from external computers requires secure authentication methods. This article explains how to configure One-Time Password pre-authentication.
This article describes how to configure Active Directory to use Kerberos Constrained Delegation with Forefront TMG.