That's only going to help you minimise per-user passwords on internal/ish systems you control. LDAP alone doesn't let you eg securely provide people access to

That's only going to help you minimise per-user passwords on internal/ish systems you control. LDAP alone doesn't let you eg securely provide people access to the password for the domain registrar.