When integrating an external Identity Provider (IdP) with Amazon Q Business for secure querying, the architecture involves a sophisticated game of "pass the credential," ensuring identity context and permissions are maintained across boundaries.