Because authentication in FastAPI often determines session handling, tenant boundaries, lifecycle events, and revocation behaviour. Once those decisions are embedded in the app, they shape access governance as much as any central IAM tool, so the auth layer becomes part of the identity operating model.