Isn't this where the ideas of zero trust networking come into play? It doesn't matter that you've authenticated to the network, you still need to authenticate

Isn't this where the ideas of zero trust networking come into play? It doesn't matter that you've authenticated to the network, you still need to authenticate to the application. SSO and the like become increasingly important in this kind of world mind.