A secure SSO gateway that validates SHA-1 handoffs from the corporate portal, provisions the user, and redirects into Hummingbird — with full auditing.