Part 1 · Users and HH2 sessions
| User | Tenant | Live sessions | |
|---|---|---|---|
| Pat Owner account_owner |
hh2-dev | 1 | |
| Alex Admin admin |
hh2-dev | 0 | |
| Robin Reviewer reviewer |
hh2-dev | 0 | |
| Bob Builder account_owner |
acme | 0 |
Ending a session does not change introspection (it follows the access token). The ATS learns of it from client-activity (401) in the browser, or when its access token lapses and the silent sign-in fails (no back-channel logout).
Open questions and failure modes
- HH2 unreachable
- up
The ATS should fail open for up to 15 minutes, then end the session. - Introspection after HH2 session ends
- active:true until token exp (real HH2)
On: ending an HH2 session (sign-out, offboard, End sessions) revokes its access token, so the ATS ends its session at the next introspection (within 5 minutes, at once before privileged actions).
Part 2 · Provisioning console (HH2 → Candidly)
client_id hh2-staging-mock · token endpoint (assertion aud) https://hh2.staging.wearecandidly.com/oauth/token # = backend HH2_OAUTH_TOKEN_ENDPOINT, exactly
· HH2's JWKS https://hh2-dev.mock.staging.wearecandidly.com/auth/.well-known/provisioning-jwks
| At | Action | Status | Candidly answered |
|---|
Part 3 · Hires received (Candidly's proposal)
None yet. Candidly posts to https://hh2-dev.mock.staging.wearecandidly.com/hired-sync.
Event log
| 12:19:31 | OIDC | Pat Owner signed in to HH2 (hosted_login) |