Prefer verified KeyCape id_token claims when /userinfo returns 401; soft-fail userinfo. Add CSOC-WP-0003 registration entry (disabled until NetKingdom URL), AAL step-up hooks, smoke/cutover evidence for tegwick OIDC without MFA. |
||
|---|---|---|
| .. | ||
| adr | ||
| design-extract | ||
| identity | ||
| deploy.md | ||
| design-extract-auth.md | ||
| dev.md | ||