Authentication gateway
The gateway owns the sign-in ceremony. This static entry page neither receives nor stores credentials, and it sets no session cookie.
Individual account
Sign in as one person, not as an organization.
This entry point is for personal Shared Auth sessions. Product roles, subscriptions, resources, and tenant membership remain decisions of the application you enter after authentication.
First-party Shared Auth surfaceuser.ores-shared-auth.com
PUBLIC HOSTexact match
EDGECloudflare Workerhost → service
Personal identity lane.
Shared Auth can prove identity and assurance. It does not infer access from an email domain, provider profile, GitHub organization, or another unverified attribute.