azure-ad-sso-deferred-local-auth-v1-stub-interfaces

Azure AD SSO was deferred from R-Same v1 because Runwal’s Active Directory infrastructure work is incomplete. v1 ships local auth only: argon2id + TOTP MFA + JWT cookies. Stub interfaces for Azure AD OIDC/SAML2 are built into the auth module so the migration path (dual-mode → per-user email-match → deprecate local) can be wired without rework when AD is ready.

Related

• r-same-local-auth-v1-azure-ad-deferred
• r-same-azure-ad-sso-deferred-local-auth-v1
• r-dash-auth-amendment-local-auth-v1-azure-ad-sso-deferred
• azure-ad-sso-deferred-local-auth-migration-path
• r-dash-azure-ad-deferred-local-auth-v1-stack
• r-same-local-auth-v1-azure-ad-sso-deferred
• r-same-azure-ad-sso-deferred-v1-local-auth-only
• azure-ad-sso-deferred-v1-uses-local-auth
• azure-ad-sso-deferred-local-auth-v1-because-runwal-ad-incomp
• azure-ad-sso-deferred-local-auth-is-v1
• r-same-azure-ad-deferred-local-auth-v1