The group uses a custom SSO provider