Maybe OAuth 2.0 ?

Because it's costly. Big companies usually don't put effort into migration legacy applications to newer Technology until its clear the return of the investment and there is still risks associated with new Technologies. So they are fat and big and so moves slowly to brand new stuff.

Take a look