Skip to Content
ReferenceImplementation coverage

Implementation coverage

This portal follows the current lookandtry-identity implementation and its executable tests.

Implemented

  • multi-tenant OAuth 2.0 and OpenID Connect issuer discovery;
  • Authorization Code with PKCE, access tokens, ID tokens and rotating refresh tokens;
  • browser and explicitly enabled first-party native authentication;
  • password, email-code, upstream-provider and tenant-federation sign-in;
  • TOTP enrollment, replacement, disablement and recovery-code regeneration;
  • self-service registration, password recovery and email verification;
  • tenant directory management;
  • global control-tenant administration and audit events;
  • durable bulk user imports and streaming profile exports;
  • staged signing-key rotation and explicit tenant federation.

Deployment-specific work

  • DNS, TLS and ingress for custom tenant issuers;
  • OAuth client callbacks and product resource registration;
  • product account binding and migration cutover;
  • provider credentials and upstream audience allowlists;
  • production monitoring, backup and secret rotation.

Physical-device validation and each product’s end-to-end authorization flow remain release gates for those consumers even when the Identity protocol tests pass.

Glossary