Couplet 6
In short: with several identity providers, no single vendor's native agent features cover everyone. The deciding question is how agents reach tools. If they call tools over MCP, a gateway that checks each call is the common answer. If budget and time are tight, start on a free tier.