SSO / Directory Integration

As an architect, I wish that the teacher would point me in the direction of any well-paved paths to directory integration, so that my users' *cloud accounts would not have to be created and admin'd separately from other accounts.