How does SAML/OIDC federation work for cloud access?

Answer preview

Enterprise users authenticate via corporate IdP (Okta, Azure AD) and receive temporary cloud credentials — no long-lived IAM users.…