Entry journeys
Table of Contents
Every other journey starts here. Signing in is where the account is authenticated, where the tenant is resolved from the hostname, where the party the person works as is chosen, and where the session is created that everything else runs inside. The failure paths matter as much as the happy one: a wrong password, a locked account, and a password that must change before anything else can happen.
Signing out is the same journey from the other end. It ends the session and returns the person to the door.
One case belongs elsewhere: the very first sign-in of a new installation, which is part of First run.