The LDAP module for Drupal 7 is a very powerful tool for handling authentication and authorization on a webserver, but with that power comes a lot of overhead and fragility when it comes to meeting the security needs of a government agency.
This presentation will cover a development team's journey into devising alternative ways of handling authorization across our networks when LDAP didn't quite meet our needs.