We currently have full control over all authentication for any internal or external resource. We use Microsoft cloud for intranet, Skype, etc. All this is using HAG and SAML. Any other accounts are done automatically using your corporate badge.