Single sign-on
Organizations can enforce SSO with OpenID Connect, OAuth, or SAML 2.0—including Microsoft Entra ID, Google Workspace, and Okta.
A protected emergency administrator account remains available if the external identity provider becomes unavailable.