From 37fff67b9f61f5c14732aa2b041d9941b71a2543 Mon Sep 17 00:00:00 2001 From: tegwick Date: Wed, 29 Jul 2026 22:14:05 +0200 Subject: [PATCH] Complete Binky portal acceptance --- ...-WP-0020-self-service-and-user-administration-portal.md | 7 ++++++- 1 file changed, 6 insertions(+), 1 deletion(-) diff --git a/workplans/USER-WP-0020-self-service-and-user-administration-portal.md b/workplans/USER-WP-0020-self-service-and-user-administration-portal.md index 9f188e9..0d327d1 100644 --- a/workplans/USER-WP-0020-self-service-and-user-administration-portal.md +++ b/workplans/USER-WP-0020-self-service-and-user-administration-portal.md @@ -165,7 +165,7 @@ required API idempotency, provider-link persistence, and suspension calls. ```task id: USER-WP-0020-T07 -status: progress +status: done priority: high state_hub_task_id: "b8d1c048-24d2-416c-908f-e500d63c6865" ``` @@ -197,6 +197,11 @@ the provider permits, and make authenticator labels identify the account. privacyIDEA's future enrollment label is now `Coulomb: {user}@{realm}` at the otpauth issuer/account level; existing wallet entries require a local rename. +Live `/api/v1/me` acceptance confirmed the canonical KeyCape issuer, +`tenant:friendly:binky`, Binky-only users/admins groups, roles `user` and +`tenant-admin`, and AAL2 `pwd` + `otp` assurance with `mfa: true`. Attempts to +open `tenant:platform` and `tenant:coulomb` administration were both denied. + ## T08 - Closure and next-stage handoff ```task