The gateway label now covers several very different jobs. The useful question is what traffic each gateway handles, what decision it supports, and where identity and access fit in the architecture.
Instead of duplicating accounts or sharing credentials, one identity system can validate identities issued by another and grant access based on that trust.
