I would imagine for a joining satellite desktop manager(s) that there would be some form of an overriding SAML-type mechanism to take in a remote authentication

I would imagine for a joining satellite desktop manager(s) that there would be some form of an overriding SAML-type mechanism to take in a remote authentication from the primary login screen.