LDAP OpenNetwork DirectorySmart

System

Is anyone using OpenNetwork's DirectorySmart product to control access to TeamSite? Specifically with ActiveDirectory?

In your LDAP, if you use the Interwoven schema extension (and even if you don't), how do you control which TeamSite servers the different users have access to?

Anyone doing single sign-on with any LDAP product (say, spoofing the Interwoven cookie(s))? If so, how do you determine what roles to give people if they have multiple TeamSite roles?

I hope to have more specific questions if anyone can answer yes to any of these.