I received an estimate to implement SSO with Salesforce (as the service provider) and Active Directory (as the identity provider).
I have a lot of Salesforce experience and a little bit of Active Directory experience, but I have never implemented SSO so I'm not quite sure of the complexity involved.
The estimate was for 20 hours. That is for the entire SSO configuration of the Salesforce side and the Active directory side. (the Active Directory server is already in place with basic ADS.)