docs: note disabled projects may be omitted from assignment views

Clarify integration expectation that provider-side project visibility can be restricted to active projects, even when historical assignments remain.
This commit is contained in:
Andy Dixon
2026-02-26 12:27:25 +00:00
parent d97638201e
commit 78606bf751
+1
View File
@@ -140,6 +140,7 @@ Provider login/authorization steps can also fail with `access_denied` when accou
WebAuthn-based login verification can return credential-style failures for disabled accounts even when authenticator assertions are otherwise valid.
Existing authenticated sessions may also be invalidated when account status changes to disabled.
OAuth authorization consent submission can return `access_denied` if the account becomes inactive between session establishment and consent completion.
Provider user/project assignment views may exclude disabled projects even if historical assignments exist.
## Operational guidance