Sign in

Email/password auth is the first production path. SSO remains a tenant-configured extension point.