Google and Microsoft identity providers authenticate through the dedicated auth domain. Each new user lands in a pending state until a local administrator confirms access and assigns a role.

The login experience reflects enterprise expectations end to end, from SSO through MFA and ongoing oversight.