One thing we have had to do is move to modern authentication methodologies (SAML etc..) when we moved some of our Intranet Applications to being cloud based. In the ColdFusion realm this switched us to using AzureActive Directory with saml hooks and we switched a long time a go to using GetAuthUser() and then with SAML setting the user once validated with cfloginuser.
There might be ways to utilize a reverse proxy that handles the SAML authentication and wraps it in a bow. And then passes it along in a nice Custom Request Header. But I haven't had the time to look for it at the moment.