Shibboleth Login Handler questions [SEC=UNCLASSIFIED]

[BONNY, Michael]

Dear Shibboleth Users,

I have been using Shibboleth for about a week now, and I have managed to setup:

1) Shibboleth SP - shibsite1.mydomain.com (running a dummy page on IIS7.5-Win2008R2)
https://shibsite1.mydomain.com/secure/default.aspx

2) Shibboleth IDP - shibidp.mydomain.com (running IIS, Tomcat6)
https://shibidp.mydomain.com/idp/Authn/UserPassword 

I have successfully configured the UsernamePassword handler + Login.config + attribute-resolver to authenticate users against a Win2008R2 Active Directory.

I have a few questions:

1) Can I implement a Kerberos/SPNEGO Login Handler to Single Sign On the users?
All of the examples I can find are all based around Linux/Apache. I thought that this would be easier with IIS on Windows using a domain joined server.

2) Can I implement an Other-IDP Login Handler, so that users can be authenticated by an alternate IDP?
The end user would get the following experience:
Navigate to shibsite1.mydomain.com (get redirected to shibidp.mydomain.com)
Shibidp.mydomain.com would then detect the user was dev-internal, and redirect them to another IDP (devshibidp.mydomain.dev)

I have read the wiki extensivly and I cant really find any references to both of my questions, I really hope that the community might be able to help.

Michael Bonny
Infrastructure Engineer