EZ - They exist and the mechanism is quite flexible. Not sure how much room is available, would have to check. EZ - LDAP still a future. EZ - All commercial in confidence at the moment. Intellectual Property issues.
Assumption is users are accessing a single resource and user has to login to each service.
This is a big problem when trying to cross-search multiple services. PH - Same problem when doing authentication component of AHDS, had to run through hoops to avoid multiple login boxes. Need to justify it to commercial suppliers. Our system is modular and object-oriented, so easy to plug new technologies in. The state can distribute it to the local Universities as part of the deal.