Password, authenticator app and passkeys for a Cognito login, over the
dashboard's server actions. initial is the page's own read; a failed one
leaves only the password and sign-out controls. A login signed in through
Google or SSO (managedSignIn) gets its passkeys only: its IdP owns the rest.
A Google login's passkey is on its native user and logs in too; a tenant
SSO login's is for step-up only.
Password, authenticator app and passkeys for a Cognito login, over the dashboard's server actions.
initialis the page's own read; a failed one leaves only the password and sign-out controls. A login signed in through Google or SSO (managedSignIn) gets its passkeys only: its IdP owns the rest. A Google login's passkey is on its native user and logs in too; a tenant SSO login's is for step-up only.