Please use the internal identity provider only for developing, testing and personal usage. When going to production, install in the Cat a plugin with a SSO compliant Auth handler.