Without a comprehensive security framework each system has to maintain its own authentication and authorization scheme, user repository, and security policies. As companies build custom applications or acquire solutions, the problem quickly becomes unwieldy.