Workspace entry requires account verification before routes and inventory are exposed.
Organizations may require second-factor verification for sensitive routes and device actions.
Authenticated views are scoped by tenant policy and session approval state.