Basically an enterprise single sign on solution. We use it to allow staff to sign into pretty much any external service using Gsuite credentials.