key-cape/workplans
tegwick 3bef507cb8
All checks were successful
Build and Publish Container Image / build-and-push (push) Successful in 30s
KEY-WP-0008: honor per-client mfaRequired and acr_values step-up
Allow coulomb-social ordinary login at AAL1 via mfaRequired: false while
keeping provider requireForAll for clients without an override. Preserve
explicit acr_values=aal2 for step-up.
2026-08-09 22:42:51 +02:00
..
KEY-WP-0001-keycape-implementation.md Normalize agent instructions and workplan frontmatter (STATE-WP-0067) 2026-06-22 23:16:27 +02:00
KEY-WP-0002-container-image-gitea.md Normalize agent instructions and workplan frontmatter (STATE-WP-0067) 2026-06-22 23:16:27 +02:00
KEY-WP-0003-bootstrap-console-oidc-mfa-login.md Normalize agent instructions and workplan frontmatter (STATE-WP-0067) 2026-06-22 23:16:27 +02:00
KEY-WP-0004-binky-hedgehog-tenant-onboarding.md Complete Binky tenant onboarding 2026-07-29 22:13:53 +02:00
KEY-WP-0005-iam-profile-core-claims.md KEY-WP-0005-T02-T03: cached tenant_roles claim, close workplan 2026-07-24 00:18:17 +02:00
KEY-WP-0006-client-credentials-service-tokens.md Complete KeyCape service-token rollout 2026-07-27 20:17:55 +02:00
KEY-WP-0007-user-engine-portal-oidc-client.md Finish portal OIDC integration 2026-07-29 22:59:38 +02:00
KEY-WP-0008-registration-handoff-and-client-mfa-policy.md KEY-WP-0008: honor per-client mfaRequired and acr_values step-up 2026-08-09 22:42:51 +02:00