A method comprising: retrieving (106; 204), from a first identity provider (IDP #1), first identity provider data for a service; retrieving (106; 203), from a second identity provider (IDP #2), second identity provider data for the service; evaluating (108; 206) the first identity provider data and the second identity provider data for generation of a default signed-in state to the service, wherein the evaluating determines that at least one of the first identity provider data and the second identity provider data comprises data indicating that a user account is signed-in to the service; generating, based on a result of the evaluating, data representing the default signed-in state, wherein the data representing the default signed-in state comprises a selection of one of the first identity provider data and the second identity provider data that corresponds with the user account that is signed-in to the service, and wherein when the first identity provider data indicates that a user account is signed-in to the service and the second identity provider data indicates that another user account is signed-in to the service, the generating of the data representing the default signed-in state comprises selecting one of the first identity provider data and the second identity provider data based on a preference, received from the service, for a user account of a specific identity provider; and surfacing (114; 208) a representation of the service in the default signed-in state, wherein the service utilizes the data representing the default signed-in state to provide an authenticated user experience for the user account without requiring additional login to the service. retrieving (106; 204), from a first identity provider (IDP #1), first identity provider data for a service; retrieving (106; 203), from a second identity provider (IDP #2), second identity provider data for the service; evaluating (108; 206) the first identity provider data and the second identity provider data for generation of a default signed-in state to the service, wherein the evaluating determines that at least one of the first identity provider data and the second identity provider data comprises data indicating that a user account is signed-in to the service; generating, based on a result of the evaluating, data representing the default signed-in state, wherein the data representing the default signed-in state comprises a selection of one of the first identity provider data and the second identity provider data that corresponds with the user account that is signed-in to the service, and wherein when the first identity provider data indicates that a user account is signed-in to the service and the second identity provider data indicates that another user account is signed-in to the service, the generating of the data representing the default signed-in state comprises selecting one of the first identity provider data and the second identity provider data based on a preference, received from the service, for a user account of a specific identity provider; and surfacing (114; 208) a representation of the service in the default signed-in state, wherein the service utilizes the data representing the default signed-in state to provide an authenticated user experience for the user account without requiring additional login to the service.