Turns out 7-years old might be a bit too young for a talk about SSO, authN vs. authZ , and bespoke SAML-esque protocols.