Proof of concept
Demo sign-in
Choose a role to enter the Launchpad demo. The role you pick is carried through the app exactly as a real sign-in would carry it, and the same role authorization stays in place when real single sign-on replaces this login.
This proof-of-concept sign-in stands in for the enterprise single sign-on call. In production, single sign-on performs authentication and authorization, and ACaaS applies the features and entitlements that the sign-on call passes to it.
Admin can perform every function. Each functional role can view the whole flow, but can only confirm the actions its own remit owns. Actions outside a role's remit are hidden and refused, deny-by-default.