From a customer:

We have a requirement, which is probably specific for MS Active Directory: When we authenticate a user, the current ldap protocol (standard) does not read the "log on to..." information. This information specifies which workstation the user can logon to. All other workstations are disabled for the user and just some are enabled. We need to authenticate it in our webapp and/or other servers (in Java). Can Crowd help with it?