On-demand SSO, directory integration, user provisioning and more