Begin · identity path
One roof, one identity path
Scroll the path you take when you Begin. Same factors as the form below: OIDC, MFA, House session, entitlements.
Interactive architecture
Identity factor ladder · House admission
Source trace · BeginHybrid + auth routes + middleware session stages
Identity
Provider to verified factors
Configured OIDC establishes identity, then email, phone, TOTP, and the Omni possession factor advance the signed session one explicit stage at a time.
SessionFull means every factor completed
Full means every factor completed
Only stage=full in the signed omniaxiom_session cookie admits protected House surfaces; partial stages return to the next factor.
Entitlements govern products after identity
The full House session admits the dashboard, then the platform snapshot governs which product surfaces the account may use.
Loading Begin…