Logto rejects @ in usernames. Extract local part (before @) as the Logto username, use full email as primaryEmail. Also validates admin user creation succeeded (logs error instead of silently continuing with null ID). Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>