Their reason for outsourcing the SSO makes sense, but the product would be a million times better with a private key authentication instead of untrusted third parties.