For anybody that is having difficulty setting up an SSO terminal services, the helpful hint is wrong, but it is correct in the documentation. The web page says to use:
Username or <USER> for IVE session username
But, in reality...you have to use <USERNAME>
We are running 6.1 of the SSL VPN.
This haunted me for 3 hours, but hey...I'm glad it's working now...and if only I'd read the documentation instead of relying on helpful hints.