Oracle forms with sso and wna

We've been running oracle forms/reports10g for many years. We use sso, OID syncd to AD and wna using kerberos to allow login to forms without the user needing to enter credentials.

We are using 10.1.2 for forms and OID and integrate with AD 2003.

We are in the process of upgrading to forms 11gR2 (11.1.2.2) and there is a parallel project to upgrade AD to 2008 - we need to provide the same functionality i.e. Sso and wna. We've struggled to find any information on this, lots on forms with sso, Oam with wna but nothing that covers them both together. We believe oam with OID should support this,but it's not clear if webgate is required or if OHS would suffice.