Complete identity smoke path: id_token claims, registration entry, cutover docs

Prefer verified KeyCape id_token claims when /userinfo returns 401; soft-fail
userinfo. Add CSOC-WP-0003 registration entry (disabled until NetKingdom URL),
AAL step-up hooks, smoke/cutover evidence for tegwick OIDC without MFA.
This commit is contained in:
tegwick 2026-08-09 22:42:51 +02:00
parent 3bc16b581b
commit 29a9ff735e
14 changed files with 513 additions and 41 deletions

View file

@ -8,6 +8,9 @@
</p>
<p>
<a class="btn" href="{% url 'identity:login' %}">Sign in</a>
{% if registration_enabled %}
<a class="btn secondary" href="{% url 'identity:register' %}">Create account</a>
{% endif %}
</p>
<p class="muted" style="margin-top: 2rem; font-size: 0.85rem;">
Tenant: {{ default_tenant_id }} · OIDC: