Federated login — brokered to one identity
Tip: append ?prompt=login to a button URL to force re-authentication.