Check some of Firefox's about:config flags. A number of years ago I enabled something related to Kerberos for my previous company's (simpler) Microsoft SSO on a Mac, it may still be available and enough to work for you.