LemonLDAP :: NG is a modular WebSSO (Single Sign On). It simplifies the construction of a protected area with some changes in the application.
It handles both authentication and authorization and provides headers for accounting. Thus, you can have full AAA protection for your web space.
LemonLDAP::NG is also an Identity Provider for CAS, SAML et OpenID Connect protocols.