You are correct that you will need to use the shared computer activation. Its been seamless for the large environment we have. It renews the token in the background with no issues.
More Info on it:
If you don't use SSO, you will need to capture:
Thanks. I'll check out the SSO setting as well.