Platform SSO For Mere Mortals

Apple's documentation headline is, "Use credentials from macOS login to perform single sign-on with an identity provider." This session assumes you don't run your own Identity Provider (IdP), and covers the basics of Platform SSO (PSSO) with existing implementations from IdPs.
One might dream of a day where a providing IdP credentials during Automated Device Enrollment results in automatically setting up a local Mac account and registering the Mac with the IdP, but that day is not today. In the meantime, let's celebrate the existing benefits of PSSO for admins and for users.