Sign-in that works on a remote control, device pairing instead of a keyboard, social and operator SSO, plus the entitlement and concurrency checks resolved before a licence request rather than after a spinner. Device pairing and TV sign-in. Social, operator and enterprise SSO. Profiles, kids modes and parental controls. Concurrency and device-limit enforcement.