Good description. Some year ago I may have worked on part of an auth solution for HMRC and the main problem for auth is summed up perfectly with https://xkcd.co

Good description. Some year ago I may have worked on part of an auth solution for HMRC and the main problem for auth is summed up perfectly with https://xkcd.com/927/ https://xkcd.com/927/ There is basically many legacy and partial rewritten auth services and abstraction layers across gov.uk. Some parts are actually good but it is confusing which funnel will trigger which auth flow. Not helped with several huge maintenance contracts to large consultancies that have no interest letting go of their legacy service.