Or the developers could implement a service-hosted data access layer, meaning that all connections to SQL Server come through one account. 1 user == 1 CAL, irrespective of how many real life users connect to that service! 😉