Allow the app to login using Azure SSO with user and device based authentication. This could be done directly through the Azure SSO app or using the Edge browser. The setting could be controlled by an admin with an app configuration policy that could also include the Condeco URL. This would allow for a few seamless user experience and a more secure login.