Outcome

Users reach the catalogue with the credentials they already have, under the access policies you already enforce, through Active Directory or OpenID Connect.