(less snarky) My point is...when people ask you to "not allow users from population Foo to authenticate to my service", that's not an authentication discussion, it's authorization and (more specifically) an attempt to conflate them. -- Scott