The root problem is that identity is tied to an instance at all. For a federated system, the lack of federated identity / single sign on is baffling.