Users sign in once through their organization's single sign-on, LDAP, or a Common Access Card. Behind that login, each connected system keeps its own authentication, and ACTIVATE handles jump hosts and prompts for one-time tokens where a site requires them. From the terminal, pw ssh reaches any cluster by name through one jump point, and the same login drives the API.
Animated walkthrough with sample data. Length: 48 seconds.