Jarek, this was my life today . I ideated an AI session for a tech group today and the underlying issue in their SSO is that whoever built it decoupled the two, making deep personalization impossible because once authenticated the user gets in and needs separate authorization for every asset so we are stuck. I am gonna read this with glee.