Single shared token for v1. Enterprise SSO (WorkOS) is the documented swap when a client's security team asks.