We have a Kerberos Key Distribution Centre (KDC) in place;
We have a WebAuth authentication server in place;
We have some proof of concept web services protected by WebAuth.