{"before":{"protocol":"oidc","label":null,"capturedAt":"2026-10-04T11:30:54.478Z","receivedAt":"2026-10-04T11:27:52.351Z","flow":"Authorization code","subject":"Lee Gov","subjectId":"0-_x7MLGOCTAFoxeSvBSFQQp4ODciFjhPhlmdv6CQpM","nameIdFormat":null,"idp":{"issuer":"https://login.microsoftonline.com/b164ba84-e972-477c-9709-7b1d0fb7d0c1/v2.0","endpoint":"https://trial-3394347.okta.com","clientId":"0oa18cdhh93p0vlZL698"}},"after":{"protocol":"oidc","label":null,"capturedAt":"2026-10-04T11:33:43.745Z","receivedAt":"2026-10-04T11:33:38.831Z","flow":"Authorization code","subject":"Lee McGovern","subjectId":"00u17dk517xLGPfvE698","nameIdFormat":null,"idp":{"issuer":"https://trial-3394347.okta.com","endpoint":"https://trial-3394347.okta.com","clientId":"0oa18cdhh93p0vlZL698"}},"protocol":"oidc","rows":[{"key":"subject","label":"Subject","note":"The sub claim is only unique within one issuer, and a new IdP issues new ones for the same people. Existing accounts keyed on the old sub will not be found.","status":"differ","before":{"name":"sub","raw":"sub","showRaw":false,"values":["0-_x7MLGOCTAFoxeSvBSFQQp4ODciFjhPhlmdv6CQpM"],"origin":"both","conflict":null},"after":{"name":"sub","raw":"sub","showRaw":false,"values":["00u17dk517xLGPfvE698"],"origin":"both","conflict":null}},{"key":"username","label":"Username","note":"What the user types to sign in. Mutable at the directory — do not use it as a primary key.","status":"differ","before":{"name":"preferred_username","raw":"preferred_username","showRaw":false,"values":["govvy9@gmail.com"],"origin":"id_token","conflict":null},"after":{"name":"preferred_username","raw":"preferred_username","showRaw":false,"values":["gov@tenantflex.com"],"origin":"both","conflict":null}},{"key":"email","label":"Email","note":"Preferred address. Not guaranteed unique and not necessarily verified.","status":"differ","before":{"name":"email","raw":"email","showRaw":false,"values":["govvy9@gmail.com"],"origin":"both","conflict":null},"after":{"name":"email","raw":"email","showRaw":false,"values":["gov@tenantflex.com"],"origin":"both","conflict":null}},{"key":"emailVerified","label":"Email verified","note":"Whether the issuer stands behind that address.","status":"added","before":null,"after":{"name":"email_verified","raw":"email_verified","showRaw":false,"values":["true"],"origin":"userinfo","conflict":null}},{"key":"displayName","label":"Display name","note":"Full name as the directory holds it.","status":"differ","before":{"name":"name","raw":"name","showRaw":false,"values":["Lee Gov"],"origin":"both","conflict":null},"after":{"name":"name","raw":"name","showRaw":false,"values":["Lee McGovern"],"origin":"both","conflict":null}},{"key":"givenName","label":"Given name","note":"First name.","status":"added","before":null,"after":{"name":"given_name","raw":"given_name","showRaw":false,"values":["Lee"],"origin":"userinfo","conflict":null}},{"key":"familyName","label":"Family name","note":"Last name.","status":"added","before":null,"after":{"name":"family_name","raw":"family_name","showRaw":false,"values":["McGovern"],"origin":"userinfo","conflict":null}},{"key":"objectId","label":"Directory object ID","note":"Immutable directory identifier. Survives renames, unlike username or email.","status":"removed","before":{"name":"oid","raw":"oid","showRaw":false,"values":["6f5d385a-fde9-4a88-8233-2e990af99cb7"],"origin":"id_token","conflict":null},"after":null},{"key":"tenantId","label":"Tenant","note":"Which directory the user signed in from.","status":"removed","before":{"name":"tid","raw":"tid","showRaw":false,"values":["b164ba84-e972-477c-9709-7b1d0fb7d0c1"],"origin":"id_token","conflict":null},"after":null},{"key":"identityProvider","label":"Upstream IdP","note":"Set when the sign-in was federated from somewhere else.","status":"differ","before":{"name":"idp","raw":"idp","showRaw":false,"values":["https://sts.windows.net/9188040d-6c67-4c5b-b112-36a304b66dad/"],"origin":"id_token","conflict":null},"after":{"name":"idp","raw":"idp","showRaw":false,"values":["00o17dk513jR27lTC698"],"origin":"id_token","conflict":null}},{"key":"authnMethods","label":"Authn methods","note":"How the user actually proved who they were: password, MFA, certificate.","status":"added","before":null,"after":{"name":"amr","raw":"amr","showRaw":false,"values":["mfa","otp","pwd","okta_verify"],"origin":"id_token","conflict":null}},{"key":"locale","label":"Locale","note":"Language preference.","status":"added","before":null,"after":{"name":"locale","raw":"locale","showRaw":false,"values":["en_US"],"origin":"userinfo","conflict":null}},{"key":"timezone","label":"Time zone","note":"IANA zone, e.g. Europe/Madrid.","status":"added","before":null,"after":{"name":"zoneinfo","raw":"zoneinfo","showRaw":false,"values":["America/Los_Angeles"],"origin":"userinfo","conflict":null}},{"key":"picture","label":"Picture","note":"URL of a profile image.","status":"removed","before":{"name":"picture","raw":"picture","showRaw":false,"values":["https://graph.microsoft.com/v1.0/me/photo/$value"],"origin":"userinfo","conflict":null},"after":null},{"key":"x:after:updated_at","label":"updated_at","note":"When the profile was last changed.","status":"added","before":null,"after":{"name":"updated_at","raw":"updated_at","showRaw":false,"values":["1791113578  ·  2026-10-04 11:32:58 UTC"],"origin":"userinfo","conflict":null}}],"tally":{"match":0,"differ":5,"removed":3,"added":7,"absent":0},"total":15,"subjectsAgree":false,"nameIdFormatChanged":false,"sameIdp":false}