Authentication is a PAIN,  there are so many decisions, functional and non functional requirements to work through. But suppose, just suppose, that you only had the following requirements: RequirementsInternal portal