Just starting to evaluate - some basic questions
For 1), check out Dukt's oAuth plugin for Craft.  Not aware of any Active Directory plugins that have been written yet and not seeing any on here, either.

The second question is pretty subjective, so not sure if that's the best type of question for SE, but I'll let someone else take a stab at it if they want.