#sso
Single sign-on
- Why does SSO login succeed but the first POST return 403?
New members using Okta can load `/new` then get Forbidden on publish. `email_verified` is true. The guidelines modal was accepted. Is there another gate on `assert_can_post` we sh...
- SAML metadata upload in admin, not just OIDC
Universities still send XML metadata. We support OIDC well. SAML is the remaining procurement blocker. Upload + validate, then show the ACS URL to copy. No custom industry type re...