Identity provider

Connect an upstream identity provider (e.g. Microsoft Entra ID) so users sign in with their organization account. Saved here — no environment variables, no redeploy.