SSO for Rich Client 4.1 in 3-tier mode ?

Hello SSO experts ! ;o)

Is it possible to get SSO for WebI Rich Client 4.1 in 3-tier mode ?

Env. : Windows Server 2012 R2, BO BI 4.1 SP7, Tomcat7, JRE 8, Windows AD, SQL Server 2014

I get SSO+WinAD for WebI RC in "2-tier" mode but not in "3-tier" mode.

SSO+WinAD is OK for BILP.

I start WebI RC from BILP but it seems that "...\Documents\My SAP BusinessObjects Documents\LocData\VM-BOBI41_cloud_xyz@6400_j2ee.extranet" file is not updated correctly (in bold) on client:

-----

connection.common.cluster_name=@VM-BOBI41:6400

connection.common.config_name=VM-BOBI41.cloud.xyz:6400

connection.common.last_authmode=secEnterprise

connection.common.last_user=

connection.common.mode=HTTP_MODE

connection.http.locale=fr_FR

connection.http.provider=WSTK_HTTP_Tunneling

connection.http.sso_provider=

connection.http.url=http://vm-bobi41:8080/BOE/portal/1512210115/AnalyticalReporting/jsp/shared/WSTKBridge.jsp

connection.http.urlbase=http://vm-bobi41:8080/BOE/portal/1512210115

connection.http.web_authmode=

-----

I've tried this:

----

connection.common.cluster_name=@VM-BOBI41:6400

connection.common.config_name=VM-BOBI41.cloud.xyz:6400

connection.common.last_authmode=secWinAD

connection.common.last_user=

connection.common.mode=HTTP_MODE

connection.http.locale=fr_FR

connection.http.provider=WSTK_HTTP_Tunneling

connection.http.sso_provider=vintella

connection.http.url=http://vm-bobi41:8080/BOE/portal/1512210115/AnalyticalReporting/jsp/shared/WSTKBridge.jsp

connection.http.urlbase=http://vm-bobi41:8080/BOE/portal/1512210115

connection.http.web_authmode=secWinAD

----

but without success.

Any idea/solution to make SSO work for WebI Rich Client 4.1 in 3-tier mode ?

Thanks in advance.

Regards,

Stephane