The Operations Manager 2007 product documentation only provides two options at present. When the Web Console resides on the RMS, Windows Authentication is the recommended configuration. When the Web Console is moved to a separate server, forms authentication is the documented solution, as the Kerberos “double-hop” issue causes Windows Authentication to fail.
In this document, product team guru Satya Vel provides detailed instructions for configuration of “constrained delegation”. This allows the OpsMgr 2007 Web Console to be configured for Windows Authentication, even when on a separate server.