That's when committees and standards bodies work well.

When they don't, you get OAUTH2.

https://hueniverse.com/oauth-2-0-and-the-road-to-hell-8eec45...