1. A content delivery system comprising: a reverse proxy server device to execute a plurality of services, the services including: an identity service, to provide a single sign-on service for a single sign-on identity, the identity service to store a set of temporary identities and credentials which facilitate access to content for the single sign-on identity; a content vending service, to authenticate at least one of the temporary identities of the single sign-on identity, and to supply an access statement for the single sign-on identity; and a content delivery service, to authenticate a request for content from the single sign-on identity via the access statement, wherein the content delivery service verifies the access statement independently of the authentication of the temporary identities, and redirects the request for content after the authentication of the access statement.