This is great stuff. Identity and authorisation are vital facilities. We don't want to have a fresh identity for every service we use