Integrating RSA SecurID & Windows AD

Hi All,

I'm looking at incorporating RSA SecurID tokens with SGD 4.60-911 (this is a must) but without using local user profiles. If at all possible, I would like to use user profiles and user groups from our Windows 2003 Active Directory to build an SGD structure. This would mean the maintenance of users/groups would be handled by AD and be less of an administrative overlap when new users are created/deleted.

Further, and I don't know if this is possible, I would like to have the ability to present users of the same AD group with exactly the same SGD WebTop (listing all the same apps and app groups). Thus not allowing the users to change their WebTop.