What I love is the smartcard... Well ... Main AAA (Authentication&#x2F;Auhtorizaation&#x2F;Accounting) problem is the clould.<p>How can we federate identity and manage them safely?<p>Plus, once you decide to be connected how to make AAA system talk to each others?<p>And then, sometimes you need to make money ... and you know, safely pass token forth and back... And what standard solution do we have that is not a framework?<p>Well, 3GPP proposed IMS based on IETF Diameter. Still not there.<p>Some proposed Role Based Accounting and proxy authz based on LDAP ... well not really deployed.<p>So we are also waiting for a new standard of inter communication of centralized Enterprise Directory that has tokens, tickets, multi policy for authentication according to origin, roaming, sane schema...<p>LDAP is honestly a good tool, is it actually relying on a secured, strongly typed NOSQL. But, I hardly saw any devs understand the anonymous bind then authed bind mechanism.<p>I do feel our biggest problem is not in the tools&#x2F;technology, but rather in too much education of people that are useless in production.