Sxip has demostrated their version of federated authentication at the Dreamforce (Salesforce.com’s show) [article here]. This is one way of doing federated authentication/authorization and there are several technologies