the lack of a simple, easily deployed services stack here means that anyone trying to implement this has to fight with half a dozen different tools (lol LDAP and its friends) and maintain, effectively, an ops department to manage it - something that's not very feasable for small orgs.