>Maybe, but it sounds like your comment was written from a place where you've never had to actually implement one of those existing solutions. I absolutely hav

>Maybe, but it sounds like your comment was written from a place where you've never had to actually implement one of those existing solutions. I absolutely have implemented the aforementioned solution. Used to be a right of passage for middling UNIX syaadmins. >Kerberos is great. It's also a holy terror to implement properly, especially cross-platform, and especially if you need to federate identity. Not really, especially not really if you Active Directory. >SCIM combined with modern cloud SSO makes life much easier than trying to support Kerberos. SCIM with Active Directory (AKA Kerberos) works well.