docs(auth): add local Entra round-trip recipe to SSO how-to

Smoke-test the OIDC config on your laptop before flipping a real deployment. Catches typos, missing optional claims, scope misconfig, and tenant-policy surprises while a broken config only affects you. Documents the two-apps-vs-one-app trade-off (separate localdev secret recommended; single-app shortcut acknowledged), the AUTH_COOKIE_SECURE override needed for local HTTP, and the request chain to verify in DevTools. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Blake Bertuccelli-Booth committed on May 7, 2026, 08:28 PM

Showing 1 changed files +36 additions -0 deletions

M docs/how-to/configure-sso.md +36