... it needs extensive core changes.
so it is.
Right now, in 2.8series, it's nearly impossible to implement such a service in a secure way.
But we work on...

In one of the future releases we will recode the login completely, as we have done with some other parts of the core already. Then you will find too a usable interface for external authentification systems.