barge, what would prevent msft from performing authentication, all on their own, with a proprietary layer they could surely create.