I'm all for fundamentalism on that front but among the undesired consequences listed those that related to SSO and 3rd party auth are indeed problematic. Not th

I'm all for fundamentalism on that front but among the undesired consequences listed those that related to SSO and 3rd party auth are indeed problematic. Not that I think that the current protocols are holy and should be kept all at cost, on the contrary, I find the privacy issues in those solution very problematic. I avoid using Facebook or Google auth for any 3rd party service. Nevertheless, at least in enterprise environments, there is a very strong and justified need for federated auth. This is issue that must be solved to keep businesses and users secure.