Admin security
Account security admin.
Review OAuth, passkeys, 2FA, sessions, login risk, recovery, and admin security controls from one protected workspace.
Security command center
Admin security remains role-gated, audit-oriented, and step-up protected. Live impersonation is blocked until approved audit controls and operator safeguards are complete.
| Control | Status | Launch blocker |
|---|---|---|
| OAuth provider readiness | code ready | Google Cloud OAuth credentials, redirect URI approval, and staging smoke evidence remain production completion work. |
| Passkey runtime readiness | setup ready | Browser WebAuthn runtime and attestation verification remain production completion work. |
| Mandatory admin strong auth | policy defined | Enforcement gate is documented and governed before production launch. |
| Impersonation | blocked | Live impersonation stays unavailable until approved audit controls are complete. |