As far as I know it should work with SBE in NTFS.
Have you added the server SSO redirects from as a trusted site? Had problems with getting correct IP-adress when doing an implementation 3-4 years ago. IE. ther server had 3 internal IP-adresses.
Otherwise there are other discussions here in the forum about the issus you can try. For instance: