Sounds like the difference between "authenticate, then access this application" and "authenticate, then access our network which has this application accessible on it."