the only downside I see here is that it may not fail back to FAS since it's also not standard authentication.