One of the problems is when this is done by companies instead of states. A company might remove your access for some, not obvious reasons. Just see current tren

One of the problems is when this is done by companies instead of states. A company might remove your access for some, not obvious reasons. Just see current trending HN link http://www.dansdeals.com/archives/98444 http://www.dansdeals.com/archives/98444 where google suspended an account and with that the person could not use the google login anymore. Even for non-google pages. That is scary. A protocol like the EDUROAM system would be nice. In that case, credentials include a domain (usually a Uni name), and with that domain the home uni(bank) can be used as an authentication authority.