It's the price we pay for the convenience of SSO. Just stumbled on this post and think the video will be helpful. I have difficulty wrapping my head around oath2.