Security
Status: Initial migration active. The SSO provider runbook is current; other security pages remain planned.
This chapter will contain authentication, authorization, SSO, secrets, RBAC, and security-control guidance for administrators.
Planned pages
sso-providers.md— current provider configuration, discovery, callbacks, and failure modes.secrets.md— document secret handling after source/configuration verification.rbac.md— document roles and permissions from the canonical implementation.
The current SSO page reflects the dynamic provider-discovery behavior. Do not revive the retired root document or add frontend feature flags that the web flow does not consume.