Kamo-to-Kamo trust - KAMO connections ask the source organization (a PENDING KAMO_ORG connected app there), approval hands the trusting connection its client id + secret-side-server, decoder / turn-off / remove end it and turn off the connection, organization picker, same-user login with JIT memberships (ID5.4)

Like what you see shipping?

All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.