Many, many resources on a traditional internal network do NOT have unified AAA. It's about more than slapping a login page on something, it's about making sure

Many, many resources on a traditional internal network do NOT have unified AAA. It's about more than slapping a login page on something, it's about making sure that every gateway to an application or data has a nigh unbreakable access control (think AWS IAM when properly configured). Almost no large scale business network in the world can say this. And with IOT, it's even harder.