Admin SSO is configured per environment. Reach out to platform ops for an invite — admin actions are audit-logged.

Dev environments fall back to a synthetic super_admin identity so the UI renders without a session.