CoreAuth
Identity core for corporations, alliances and coalitions.
Signing in requests no ESI access at all. Proving that you control the character is all authentication needs.
Anything beyond that is asked for separately, named with the purpose it serves, and can be withdrawn from your account page at any time.