This is a case study question. What steps should an organization take when preparing to deploy Workspace and using an existing identity provider for authentication and SSO, while also needing to migrate data from an external system and provision user accounts in advance, with a need to block access for most users until migrations are complete?