Our marketing department comes back with \"active directory integration\" being a key customer request, but our company does not seem to have the attention span to (1) decide on
As key to map AD-users/groups to stuff in the application, I typically use the Security Identifier (SID) from the AD-user/group.