Your company has multiple internal applications used by your employees.

Keep the credentials separate for each application to reduce the blast radius in case of any issues.

Use an external identity provider that is famous and popular like Facebook or Twitter; that way, even your vendors and contractors will have an account there.

Allow all users, especially contractors and vendors, to bring their own identities, like those at gmail.com.

Use an IDaaS (Identity as a Service) product that can centrally manage authenti-cation and authorization for the applications.