SAML/SSO, SCIM, granular roles per tenant and per environment.
Enterprise identity from day one: SAML/SSO and OIDC for authentication, SCIM for automated user provisioning, and role-based access control scoped per tenant and per environment — not just a global admin/member split.