Oliver Kieselbach 6a61ec5360 docs(design): MCP OAuth flow — who authenticates where ...

Sequence diagram and explanation of the dual-identity connect flow (AI-product
account vs. Entra work account), including the frequently-missed requirement
that the default browser must hold an active vendor session (claude.ai) for
the callback in step 6 to be accepted.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-07-11 10:36:34 +02:00

..

enrollment-status-reclassification-plan.md

fix(reclassification): review hardening for timeout status states

2026-07-08 19:26:41 +02:00

enrollment-status-reclassification.md

fix(backend): honor Hello-disabled + SkipUserEsp in the user-completed-setup reconcile rule

2026-07-10 10:51:57 +02:00

mcp-oauth-flow.md

docs(design): MCP OAuth flow — who authenticates where

2026-07-11 10:36:34 +02:00