I was asking the same question not too many days ago. I went with LDAP. It is not as difficult as some people think. It seems somewhat daunting at first but then you quickly get the grasp of it. It simply *works* and solves *a lot* of challenges at the same time, leaving you ready for future expansion.