And a really good security guy may also know of Shibboleth as an implementation of identify federation / cross-domain SSO. ;-)