oap login

Open a browser tab to this cluster's identity provider. After you authenticate, the signed assertion is cached in ~/.config/agentprimitives/identity.json for use by other oap commands.