If you have Publisher then you can go with NTFS, or Even DMS.
If you don't have Publisher I would suggest you to go with DMS authorization.
Regarding single sign on, Yes user can automatically be logged in with the users.
For that you need to check in internet explorer, internet option --> security --> internet --> custom Level --> in user authentication --> select logon with the current user automatically.
Hope that helps,