The Sierra report argues that authorization capabilities such as identity, permission scopes, consent, and auditing can be delivered as standard components that are available off the shelf