I think the shortest path would be to implement an industry standard federated authorization mechanism as OpenID. But to be honest I don't fully understand you

I think the shortest path would be to implement an industry standard federated authorization mechanism as OpenID. But to be honest I don't fully understand your proposal, maybe I'm just missing how it's simpler. :)