We'll have the user enter their username. If the username ends with @obra.com then we redirect them to the SAML SingleSign-On flow using Microsoft Entra as the IdP. Otherwise, we'll prompt them for their password, salt it and check it against the database. Finally, we'll ensure that their account is not expired or locked.