Allow default security policy for users who sit outside of verified domains

For instances where users are signing in from non-verified domains, allow the ability to set a default security policy for PHR access, so that things like default SSO provider or even mandatory MFA can be applied.

Describe the Challenge

Users signing in under non-verified domains (e.g. contractors, staff working under customer brands etc) not having basic security policies applied, with no visibility (e.g. MFA)