#gRegorAh, it is kind of both I think. With IndieAuth you'd access a restricted page, it would ask you to sign in by entering your domain, then it would do discovery on the entered domain to determine where to redirect you to sign in / authorize the request.