Two products, two login servers
The Guest Portal is public and anyone may sign up for it. The Admin Console is internal and its login server only issues tokens to the Administrators group. Nobody is given the administrator password, which is generated at start-up and never printed.
- Sign in to the Admin Console as
guest@acme.testwithGuest-Signup-2026. The admin login server refuses you. - Sign in to the Guest Portal with those same credentials. That one works.
- Now open the Admin Console. You are inside it, as
guest|1. - Open the different-hostname control. The same session is refused there.
No session
No session cookie is present.
Which login server each product uses
| Guest Portal | https://f16-idp.huntland.abiusx.com/oauth2/guest |
| Admin Console | https://f16-idp.huntland.abiusx.com/oauth2/admin |
| Control | https://f16-other-idp.huntland.abiusx.com/oauth2/admin |
Each also answers as JSON at /guest/whoami, /admin/whoami and /other/whoami.