Record email login portal improvement
All checks were successful
CI Smoke / host-smoke (push) Successful in 0s
CI Smoke / container-smoke (push) Successful in 1s

This commit is contained in:
tegwick 2026-07-29 23:14:14 +02:00
parent e0e4d61c58
commit de2c02dc6d
2 changed files with 6 additions and 1 deletions

View file

@ -151,5 +151,5 @@
| task | USER-WP-0020-T04 | progress | — | workplans/USER-WP-0020-self-service-and-user-administration-portal.md |
| task | USER-WP-0020-T05 | progress | — | workplans/USER-WP-0020-self-service-and-user-administration-portal.md |
| task | USER-WP-0020-T06 | wait | — | workplans/USER-WP-0020-self-service-and-user-administration-portal.md |
| task | USER-WP-0020-T07 | progress | — | workplans/USER-WP-0020-self-service-and-user-administration-portal.md |
| task | USER-WP-0020-T07 | done | — | workplans/USER-WP-0020-self-service-and-user-administration-portal.md |
| task | USER-WP-0020-T08 | wait | — | workplans/USER-WP-0020-self-service-and-user-administration-portal.md |

View file

@ -197,6 +197,11 @@ the provider permits, and make authenticator labels identify the account.
privacyIDEA's future enrollment label is now `Coulomb: {user}@{realm}` at the
otpauth issuer/account level; existing wallet entries require a local rename.
2026-07-29 follow-up: the first-factor edge now accepts either stable directory
uid or full email using Authelia's documented LLDAP uid/mail filter. The
resolved subject remains the uid, so this improves login comprehension without
changing identity keys.
Live `/api/v1/me` acceptance confirmed the canonical KeyCape issuer,
`tenant:friendly:binky`, Binky-only users/admins groups, roles `user` and
`tenant-admin`, and AAL2 `pwd` + `otp` assurance with `mfa: true`. Attempts to