One thing that would be great is to use Active directory authentification. (SSO would be nice too.)
Some of the web application that we use is using this feature.
Even the use of Active Directory Group to set rights / security / alert in UpTime and then the user wrights are dynamically updated.(Nightly update would be fine to)