title: Can OAuth 2 be used for SSO? Or do I need a more sophisticated authentication?
body: <p>We're going to use drupal as a portal, but authentication should be external to drupal. This is the first step for a future architecture. In the future, other applications should be able to use the same authentication architecture (as well as identity and profiles).</p>
  
  <p>We're also going to have some initial REST APIs (e.g. PubSub).</p>
  
  <p>We will use OAuth for the REST API authentication.</p>
  
  <p>But what about future web front end applications? Would they also use OAuth? Or do I need to think of a more sophisticated authentication infrastructure?</p>