just read about the new //sso module and it sounds good. wouldnt it be better though to use saml for this?
see also a feature request, 1575.