So, why do we not use MS Security Groups? Then you can add a person to the group that already has folder access, email org account access, and proper SharePoint permissions...
Why are we still doing it the old and very hard way?
Yes, setting up security groups properly is an as slain, but once they're set up, you can actually share your SharePoint site with other organizations with about three mouse clicks and a few keystrokes.