John Hawley joined me to talk about CloudMinder. This is a single login option for employees to use one password for logging into multiple services including cloud based services. Just like a central identity service, you can set a standard model for an employee. When that person leaves the company, you can control their authentication with one account.
Add the One time passwords into SaaS into the cloud. As for security, it depends on the maturity of the company. You can do it on-site or off. Hawley believes that is a benefit for scalability. Check out www.security.com for more