When you use Windows native supplicant, I don't think SSO is possible with IC.
Machine certificate authentication can be possible, if supplicant supports EAP-TLS.
Note: IF I have answered your question, you could post it as accepted solution, that way it helps others as well. Kudos is a bonus thanks!
IC version 4.2R1 is officially available for download at Juiper support page.
Raveen, Thanks alot for updating.
Is the problem with win 2008R2 fixed in it? can we do the machine auth with certificates only as a work arround?
No need of workaround. You can do machine authentication using EAP-MSCHAPv2.
IC 4.2R1 supports native supplicant and its authentication protocols.
Note: If this answers your questions, you could mark this as accepted solution, that way it might help others as well.