LDAP and other external authentication and authorization modules for D7 and D8

Discussion of state of LDAP Authentication, Authorization, Provisioning etc. modules for Drupal 7. Discussion of other external authentication and authorization modules would be welcome also including core improvements to user module that help external auth modules and potential for collaboration among external authentication modules.

Of particular interest to me is a standardized mapping approach for data sources (ldap, shib, cas, etc) to authorization grants (drupal roles, organic groups, etc.) such as the Feeds module uses for data mapping. But this need not be discussed. http://www.gliffy.com/publish/2384881/
http://www.gliffy.com/publish/2376942/
http://www.gliffy.com/publish/2318063/

Im also interested in ability of users with multiple authentications/drupal accounts on a single site to self-merge accounts.