[couchand]

Not GP, but one architecture where there would be a difference is there's a distinct identity provider, responsible solely for exchanging the user's long-lived username/password credentials for a short-lived ticket.

[bigDinosaur]

I imagine the process going a bit like https://youtu.be/y8OnoxKotPQ

[christophilus]

I knew what that was before I clicked it. Never disappoints.