I want something that'll integrate auth across SSH, web (ideally including SSL, with the option of authenticating with either client-side cert or password, like they do at MIT), and whatever applications want to use it.
Kerberos seems to best fit what I want, but tool support seems surprisingly poor.
What do people use these days?