Mine's actually more on LDAP. It seems that more and more goodies are available with LDAP authentications. There's various groupwares like egroupware, moregroupware and PHProjekt to name a few. Let's not start with CMS..
We may not be able to achieve single-signon but, if we can achieve universal signon, it'll be great!
Sincere regards and thanks!