One way that I've seen it accomplished is through Sun Access Manager protecting the Identity Manager website and using the Kerberos authentication auth method to check and see if the AD user has an active AD session.
Another way is to issue each user a digital certificate into their certificate store and then roam that with their desktop. Then configure IDM to use certificate-based authentication.