Free but without source
When using more secure authentication mechanisms like client
certificates or tokens, the password is not required anymore. This also
limits the ability of iChain to perform single sign on using the login
name and password. This new OLAC provider allows you to read the simple
password and use it to perform single sign on to upstream servers.
It requires a universial password policy with the simple password
enabled and synchronized with the universal password.