100%, doesn't disagree with anything in my post - my point was, it's not a bad idea to go through the effort of learning how to integrate with an auth system at

100%, doesn't disagree with anything in my post - my point was, it's not a bad idea to go through the effort of learning how to integrate with an auth system at a deep level so that you understand how it works. Still, writing the code for SP side isn't _that_ dangerous if you already had an app that was reasonably secure at the application level behind its own standalone auth mechanism. Would only make sense to do if your language / framework has no good bindings or plugins for this already, though.