I'm a bit amazed retailers aren't using federated logins whenever/wherever. Just offer a slew of them. There are libraries in most frameworks for most OAuth and OAuth2 providers.
Most of our clients aren't interested. They are as oblivious to what OAuth is and what it does as my mom is. The platform we use only got OAuth2 support built in about two years ago.
