Email routes to the correct identity provider. Lockbase staff sign in via the workforce Entra tenant; customers sign in via Microsoft Entra External ID. Phishing-resistant MFA and Intune-compliant device required for staff.