Connect to fairlogin SSO
Choose and install proper Drupal module for SAML or OpenID connect.
Registered users should be allowed to comment or write a blog entry.
This is a precondition for #10 and would avoid usage of shared accounts e.g. for translators.