Well, it sounds to me like you haven't worked on systems of any complexity. Seven days for a federated auth system that behaves the way people actually want it to behave is very, very low.