Enable SSO, using Windows Integrated Authentication for the UMS console.
As we use certificate based logon for all our users and administrators, exceptions has to be made for admins using the UMS console.
The console is out of scope, but WEB UMS is on the roadmap!