Thanks for your reply.
But unfortunately I haven't found an easy way to make NTLM work, as single-sign-on application in a windows domain.
Just for information, how we solved it finally:
With a hint from a colleague we used the THTTPClient-component from System.Net.HttpClient, which supports NTLM and also the newer Negogiate-protocol from windows, as we need it for our application.
So with this component we have to create some code to process the JSON data, but the heavier part with security, sign-on and TLS comes right out of the box from Delphi.