A role is not an identity.
The systems workspace simulates employees and permissions. It does not authenticate a real person or connect to a Google account.
REAL OIDC / SSO: NOT CONFIGUREDWhat you can try
Switch synthetic actors to exercise approval rules, role permissions, and the audit trail. A demo role does not grant site administration or access to another browser’s data.
Try independent approvals →What real identity needs
Registered OIDC clients, exact redirects, signature/issuer/audience/expiry validation, nonce and state, secure session cookies, server-side membership, CSRF protection, logout, and two separate clients for an actual SSO demonstration. Those resources are not configured.