Name the account site NetKingdom Identity.

Say "Signed in as" the identity, and describe a one-time code as a
higher security level of the NetKingdom sign-in rather than another
sign-in. The account site keeps its own session.

Assistant: grok
Assistant-Session: 01a0d25d-d358-7e13-b84a-d007fbb7e34f

tests/test_authentication_policy.py

@@ -42,7 +42,7 @@ class AuthenticationPolicyJourney(JourneyFixture):
         self.assertEqual('403 Forbidden',response['status'])
         self.oidc.sessions['operator'].claims['assurance']['at']=time.time()-301
         _,body=invoke(self.app,'/platform/authentication-policy',cookie='ue_session=operator')
-        self.assertIn(b'fresh MFA sign-in',body);self.assertEqual([],self.provider.calls)
+        self.assertIn(b'one-time code before viewing',body);self.assertEqual([],self.provider.calls)
     def test_review_explains_lockout_scope_rollback_and_receipts(self):
         _,body=self.post('/platform/authentication-policy',who='operator',action='preview',client='vergabe-demo-company',mode='mandatory',reference='p06-case')
         self.assertIn(b'Review policy change',body);self.assertIn(b'unable to complete sign-in',body)