We've had Crowd deployed for two years to handle web app auth. Configuration, deployment were a bit painful.

We're pulling it out and writing our own - seems to be the only way to get necessary features such as delegated administration which have been on the Crowd roadmap for years now.