Simulation only. In production this is replaced by Microsoft 365 sign-in with mandatory MFA, restricted to the seeded users.