Central identity, application authorization, OAuth/OIDC sessions, and canonical provisioning.
Activation and password reset use separate one-time purpose-bound codes. Normal passwords are never generated for imported employees.
MEXORA
Super Admin uses this control plane. Tenant admins normally work through FMS/AO delegated administration.