When securing an ecosystem of apps, the immediate impulse is often to outsource authentication to a SaaS identity provider. While this “buy” option works well initially, many organizations eventually hit a wall: ballooning active-user pricing, rigid multi-tenancy limits, complex …