Blueprintr matches the email domain to a verified SSO connection (SAML 2.0 or OIDC) before redirecting.