Sam invited you to Acme Labs. Choose how you want to sign in — this is yours rather than the org's, and it carries to any other org you join.
ADR-0100 decision 1, and it is blunter than the ADR-0024 this used to quote — no deferral, no gate, no reopening trigger: "Kordin builds no passwords, MFA, recovery or SAML." Identity is the org's own provider and we check the tokens it signs. This route is drawn anyway, because the product owner asked for it and a decision is better taken with the thing in front of you. It comes out in one commit if the answer is no