Not a direct response but for the multiple login problem have you considered using some kind of ldap like active directory ?
A detail I didn't include in my original post is that the primary devices used are Android tablets & phones. I don't know much about ldap in the mobile context (or in general, to be honest).
Good luck with your search :)