[cap-talk] Capabilitites and Directories

[Ben Kloosterman]

How would you integrate capabilities into existing organizations using
Active Directory or LDAP ? Should capabilities be persisted in a directory
for a particular user , group or process ?  

or is something like this "Distributed capability-based authorization
architecture" ( http://www.freepatentsonline.com/7404203.html)  more
appropriate ?

or should we go with some of the newer web  based  authorization methods if
so how do these integrate into organizations Directories ?

Regards, 

Ben