M1Sign-inAccess via the configured OIDC IDP, including error states (IDP unreachable, no role). Areas and dialogs: Sign-in area; notice when authorisation is missing Requirements: A41, N8, N9