One of the things we're dealing with here is application security and authorization for users (authentication).

Craig McMurtry has a great series on implementing application security using AD (Active Directory) and ADAM(AD application mode) in which you use the organization's active directory to add user permissions to stuff.

It's divided to parts,

here's part one

(lots of parts in the middle...)

here's the latest part (14)

looks very promising.