Check first if there is an alternative DN to use.
Use LDAP magic number to include subgroups. Set the e-group to something we can control.
Certificate association page to point to the SSO mapping page; clean up hypernews and password related features.
Update the documentation to include the v1 to v2 api migration.