Seems to me you should setup SSO and do whatever compliance you need to do, and get those customers on board.