diff --git a/docs/INTEGRATION_GUIDE.md b/docs/INTEGRATION_GUIDE.md index cf09c6c..a8ad31b 100644 --- a/docs/INTEGRATION_GUIDE.md +++ b/docs/INTEGRATION_GUIDE.md @@ -140,6 +140,7 @@ Provider login/authorization steps can also fail with `access_denied` when accou WebAuthn-based login verification can return credential-style failures for disabled accounts even when authenticator assertions are otherwise valid. Existing authenticated sessions may also be invalidated when account status changes to disabled. OAuth authorization consent submission can return `access_denied` if the account becomes inactive between session establishment and consent completion. +Provider user/project assignment views may exclude disabled projects even if historical assignments exist. ## Operational guidance