NTLM or Kerberos will allow you to do single sign on with an Active Directory storing Windows domain credentials. Check out the MediaWiki authentication extensions. Particularly, the Kerberos configuration for the LDAP Authentication extension or this NTLM extension.