I\'m getting ready to stand up some core infrastructure for a new organization (DNS, email, directory, blog, wiki, etc.) - and I\'ve started to think about single-sign-on an