N9
Standard OIDC only
Unit E0 · Verification type Test, Review
- Discovery via
/.well-known/openid-configuration, Authorization Code with PKCE, ID token validation according to the standard. - A dependency test fails if provider-specific libraries (e.g. MSAL, Keycloak adapters) are listed in
package.json; a code search for provider-specific claim names outside the mapping layer is part of the review.