Auth Flow to Use Custom URI Fully

Right now, you can set up a custom URI/URL for Canary by creating a DNS record that points to the Axiom machine and adding that URL to the Identity Tile redirect list. But, when people go to the custom URI, it redirects them to the hostname to authenticate. This is not ideal because 1) it's not good practice to expose the FQDN and 2) depending on the domain (like .local) you can't put an SSL cert on the machine that non-domain computers (like people VPNed in) will trust. Which means, whenever someone goes to log into Axiom, the browser will tell them it's not save; and they have to know where to find the "go there anyway" button.

There's plenty examples out there where you can log into a website without being directed to the FQDN of the host server, so I would assume it's possible to update the auth flow to not do that. Right?!

(I'm putting this in the Axiom topic, but it applies to the Excel Add-In too.)