hsiegeln a3c0e9aa7f docs(auth): harmonization design — login routing capability model ...

Captures the decision to gate login UX on capabilities (no SaaS-mode
flag), drop prompt=none from the primary OIDC flow per RFC 9700 §4.4,
and keep ?local as the explicit admin-recovery escape hatch.

MFA enrollment / enforcement and password reset for local accounts are
explicitly deferred and tracked in issue #154.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

2026-04-26 18:37:00 +02:00

..

plans

docs(license): session handoff at task 14/36

2026-04-26 12:07:35 +02:00

specs

docs(auth): harmonization design — login routing capability model

2026-04-26 18:37:00 +02:00

backlog.md

docs(alerting): add BL-002 for native provider integrations + Mustache auto-complete

2026-04-19 15:10:00 +02:00