The settings you have there look pretty good.
A few notes:
- PMK caching is a good setting, so leave on
- The 802.1x settings there are only 'advanced timers' so I don't see a lot of value in maniuplating those unless you are experiencing dot1x timeouts or sporadic performance.
- Your users will appreciate SSO :)