I think you need to add the SSO, and the product can manage the users like group department.