Authentication needs to be secure, but it doesn’t need to be complicated. The complications arise not from the technology, but from the business requirements. Think reporting lines, division, etc. Layer on acquisitions that don’t fully migrate systems and you’re left with a very sad layer cake.