aaronpkesri is actually a really good citizen in the identity space. for example you can delegate arcgis.com logins to your own enterprise infrastructure using saml, which means you can even auth against arcgis.com from an auth server that's behind a firewall
