Aren't you re-inventing the SAML / OAuth wheel here? After all, running authentication as a service is precisely what an IDP does.

But interesting option to bundle a micro IDP with the OS. Probably would make a lot of security sense and every app using it would automatically work with a real IDP easily.