Only the platform's own login door may start another organization's portal sign-in (Identity ID5.6)

Shipped

November 15, 2026 at 2:36 PM UTC

Author

Kamo

Commit

43bba51

An organization on a platform sub-domain (login.acme.demo.kamocrm.com) resolved as a "platform host" and skipped the same-organization check, so it could start a different organization's portal (found by the live probe). The door is now only login.<platform apex> itself; everything else must name the portal's own organization.