...
The LDAPPC-NG project addresses provisioning.
OpenLDAP is a mature LDAP implementation.
Grouper is a mature group management tool.
Shibboleth enables federated access management.
Domesticated applications easily integrate with your infrastructure, like a CASified application. In a perfect world, apps are easily made domesticated and therefore they will.
