Skip to content

Document sensitive identity provider auth safety #477

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
masnwilliams wants to merge 3 commits into from
Closed

Document sensitive identity provider auth safety #477

Changes from all commits
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
2dc8156
Document sensitive identity provider safety
masnwilliams Aug 4, 2026
be52786
Keep managed auth recovery checks documented
masnwilliams Aug 4, 2026
d6b3a4e
Keep identity provider guidance generic
masnwilliams Aug 4, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 4 additions & 0 deletions auth/faq.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -18,6 +18,10 @@ Managed Auth supports username/password authentication and most SSO providers.
Passkey-based authentication (e.g., Google accounts with passkeys enabled) is not currently supported. If a user's SSO provider requires a passkey, the login will fail with the `unsupported_auth_method` error code.
</Warning>

<Warning>
For sensitive identity providers, use an established account and attach a stable ISP or custom proxy before login. Keep the default 1-hour health-check interval unless you need faster detection; repeated checks from a new account or changing IP addresses can trigger the provider's security controls.
</Warning>

## What happens if login fails?

Kernel retries with exponential backoff, then surfaces an error code (`credentials_invalid`, `bot_detected`, `captcha_blocked`, etc.). See [Connection Lifecycle](/auth/connection-lifecycle#when-a-login-fails) for the full list and recovery steps.
Expand Down
Loading