I have been alluding for a while about my ideas for future
FreeIPA/Dogtag PKI integration; I finally put the ideas down in a
blog post. If you are interested in this aspect of IdM please read
it; all feedback is welcome!
http://blog-ftweedal.rhcloud.com/2015/11/freeipa-pki-current-plans-and-a-...
Thanks,
Fraser