Per-member SSO credentials and a preflight that explains failures

Shipped

August 15, 2026 at 9:20 PM UTC

Author

Kamo

Commit

de7f9f5

Linux is gated on an enabled provision rather than god, and served with the member's own credentials. The connection is omitted from the token entirely when they have none — offering one that will be refused surfaces as Guacamole's generic error, which is the unactionable failure this removes.