I'm writing my first custom policy for MS's B2C identity provider, and it's a painful process.

Making authentication and SSO more painless will actually make the world a better place -- apps will become more secure, people will be less frustrated when they use them, etc., and people like me will have less stress in their lives.