We use a local version of UAA (https://docs.cloudfoundry.org/concepts/architecture/uaa.html https://docs.cloudfoundry.org/concepts/architecture/uaa.html) he beh

We use a local version of UAA (https://docs.cloudfoundry.org/concepts/architecture/uaa.html https://docs.cloudfoundry.org/concepts/architecture/uaa.html) he behaves like a google or facebook authentication where the user concedes the permission to the apps using OAuth 2.0 protocol. We have 10+ web clients, 2 mobile apps and one internet gateway. Spring Security make it very easy to integrate everything. https://oauth.net/2/ https://oauth.net/2/ Auth0 is the best documentation to learn about oauth: https://auth0.com/docs/protocols/oauth2 https://auth0.com/docs/protocols/oauth2 The best part of using Oauth is that you can change your authentication server (UAA, Auth0, etc) without changing your app code (only configurations)