What it does
Stands between the application and the company's own provider: the users are hosted in its tenant or read from the corporate provider behind it, and the password and authentication policies enforced are the company's own.
Remaining work
Ask for a tenant, connect the corporate provider to it, and map the attributes the provider returns to the ones the applications expect.