The identity frameworks most enterprises rely on were built for static sessions, browser logins and persistent credentials.