just read about the new //sso module and it sounds good. wouldnt it be better though to use saml for this?

see also a feature request, 1575.