Hi,
from security and usability perspective, the best solution would be to re-use the Windows authentication (the Kerberos ticket) also for your SNC connection to the backend. However, this requires an SNC capable SSO product such as SAP Single Sign-On.
Logon tickets are no longer recommended for new implementations, as mentioned in OSS note 2117110.
Best regards,
Christian