Hey Jon - you don't have to use customer-managed ORDS in this use-case, however, one of the things I'm finding is that the approach above breaks Social Sign-on. So if that's a requirement, you're into customer-managed ORDS territory. See the "Epilogue" above.