Preview: LDAP/SSO support

I think mix between b) and c) sounds like an optimal solution