A bunch of different "identity as a service" type products seem to be getting more prominence (Auth0, Stormpath, and Ping Identity come to mind), too. The selling point of these seems to be that you as a developer don't want to spend all your time doing figuring it out and doing it right, so offload it to somebody else.