Federated authentication that lets a user authenticate once to an identity provider and access multiple downstream applications via SAML, OIDC, or similar protocols.