Andre Durand talks of four ways that an enterprise can consolidate islands of identity information. They can "centralize authentication and policy management (the EIM vendor approach), create a meta directory and manage id's through that, create a virtual directory (virtually centralized view of distributed data), or tether together (federate) distributed ID's." I'm trying to think of the implications of each approach to the enterprise and when one or the other might be appropriate.