Actually, for commercial users, what would rock is something which could do LDAP and integrate with real-ldap or Active Directory for access control; taking it away from a weird outsourced system or standalone old windows PC and integrating with the regular IT infrastructure.

This already happened with PBXes; next, it should happen with access control, and then with building management (HVAC; imagine if logging into your workstation allowed you to have programmed lighting/heating controls for your work area happen automatically; especially useful if you work at night or on weekends in a big office)