Can an Active Directory be used as an OpenID provider? WIF is an option, but it's quite complicated and not very widespread.