One Login Kit
Download the branded migration guide and the paste-ready brief, then distribute them to every Cargo spoke.
Cargo Ecosystem // One Login
Spoke Migration Kitcargo.ac owns identity · credentials live ONLY on one.cargo.ac · every spoke registers a Custom OIDC Provider with Auto-discovery OFF (issuer copied from live discovery, endpoints on auth.cargo.ac) and shows one "Continue with Cargo Account" button · tokens trusted via JWKS · one global logout.
These documents are guidance, not gospel. Tell each spoke to confirm every endpoint, claim and scope against live OIDC discovery and JWKS before using it — and to stop and ask if anything conflicts with its real stack.
PDF · 9 pages · branded · print-ready
One Login — Spoke Migration Guide
The full, CargoWorks-branded manual: what changes, ecosystem endpoints, identity claims, delete-vs-add checklist, the masked-hybrid Custom OIDC model (Auto-discovery OFF, issuer copied from live discovery), step-by-step backend + TanStack migration, DB/RLS rules, acceptance checklist and roll-out order.
Markdown · drop into each spoke's our platform chat
Paste-Ready Spoke Brief
A hardened prompt that instructs each spoke's AI exactly what to remove, add and configure — and to verify every value against live discovery instead of copying blindly.
Distribute to: CargoWorks AI · IO · Directory · Cargo E-Mail · Network HUB · Websites.