SummaryMicrosoft’s XML extensions form the basis for the Passport single sign-on service but are fundamentally inconsistent with SGML principles. In contrast, Plan 9’s factotum authentication management offers an elegant and effective open source alternative. (6,000 words)