Windows login (SSO) works on a boot, it does not work after hibernation.
With hibernation, you're resuming a previous session - there's no relationship between the boot session and the resumed windows environment, so SSO is not really possible.
So, what I'm seeing is a pre-boot auth and then basically a screen saver password? There is no way around this then? Always coming out of hibernate the user will have to log in to the machine twice?
you could turn off "prompt for password after resume" I guess? I would not advise it though.