If it is not oAuth, where does Microsoft come from then?