Is there enough control over AD user properties to have custom fields (one with only SELF having read permissions) and with Certificate Services to automatically maintain/auto-renew certificates and place both the public and private keys into separate fields in Active Directory?
We're building an application where our Active Directory is the only source for identity and authority, and we need to implement document signing. We can't think of any other way to maintain a user's access if it's stored anywhere else.