I did this for a bunch of government sites many years ago. It was amazingly simple and completely transparent to the user. No passwords. No auth cookies. No reg

I did this for a bunch of government sites many years ago. It was amazingly simple and completely transparent to the user. No passwords. No auth cookies. No registration. Developers don’t even have to know about it. My understanding is that it’s still supported by every major browser. I’m not really a web programmer though; just stepped in on a lagging contract and it seems like the best solution.