Single sign-on for the management console

Administration of the new platform still depends on local accounts. Bringing it behind the same sign-in used everywhere else removes a separate set of credentials to manage and revoke.