there is a couple ways to do and handle this. It seems like the best practices change every 6 months. There is a similar way to do this with azure AD also. I'm curious how workos differs. Seeing this field evolve over the last 2-3 years has been interesting.