There are some practical aspects of role manager that I do not see discussed and would be interested to hear input regarding how enterprise single sign on deployments can assist. Once an eSSO deployment has had the time to incubate, we can glean valuable information as to who accessed what, when, how and even where. With this data, organizations can correlate access versus purported role and group access rights to either validate or invalidate authorization to relevant applications and data. Implementing this practice as an ongoing process would give a role management project additional check points.