so identity federation isn't a thing? and is cloud the same as office ? because the former is all about supporting separation on the latter.

disclaimer: former aws, and always oss, and actually used aws/azure/gcp in anger