If they are able to refer to a shared workstation folder from the server using a UNC path, and IWA is being used uniformly (both for the initial SAS Metadata Server connection and the SAS Workspace Server launch by the SAS Object Spawner - all verifiable in the appropriate SAS logs), then it may be that the server(s) running the SAS Workspace Server session(s) may not be Trusted for Delegation in Active Directory. I wrote down some notes about this type of configuration in a blog post SAS and IWA: Two Hops that may help (as well as a few others in a series on IWA).
... View more