They come directly to my application, so we can’t know them in advance.
If it possible, we want to authenticate with identities from A and B in just one universal login page.
(our client wants)
But technically, I understand that we should have UI to divide them before Lock which you suggested me.