Comment by benjaminjosephw

So it turns out that when you outsource auth, you also outsource some of the governance on who can access your platform.

Isn't access control a set of patterns rather than a service? When did it stop being a core competency of web applications?