/* Single sign-on: the buttons on the sign-in card, #/manage/sso and the linked
   accounts block on a person's page. Shell tokens only, so tenant accents and
   the dark theme carry over; nothing here may widen the page past 320px. */
.sso-block{display:flex;flex-direction:column;gap:10px;margin:14px 0 4px}
.sso-btn{display:flex;align-items:center;justify-content:center;gap:10px;width:100%;min-height:44px;
  text-decoration:none;color:var(--ink);background:var(--surface);border-color:var(--edge)}
.sso-btn:hover{background:var(--raise);border-color:var(--ink-2)}
.sso-btn:focus-visible{outline:3px solid var(--accent-deep);outline-offset:2px}
.sso-logo{width:20px;height:20px;flex:none}
.sso-or{display:flex;align-items:center;gap:10px;margin:6px 0 10px;color:var(--mute);font-size:13px;font-weight:600}
.sso-or::before,.sso-or::after{content:"";flex:1;border-top:1px solid var(--edge)}
.sso-or span{text-align:center}
.sso-note{margin:2px 0 6px;color:var(--ink-2);font-size:14px}

.sso-admin{display:flex;flex-direction:column;gap:16px;padding-bottom:40px;min-width:0}
.sso-admin .panel{min-width:0}
.sso-back{margin:0 0 .75rem}
.sso-back a{color:var(--accent-deep);font-weight:650}
.sso-summary{display:flex;flex-wrap:wrap;align-items:baseline;gap:6px 10px;margin:10px 0 0;color:var(--ink)}
.sso-admin .pill.is-on{border-color:var(--good);color:var(--good);background:var(--good-wash)}
.sso-admin .pill.is-off{border-color:var(--edge);color:var(--ink-2);background:var(--raise)}
.sso-facts{display:grid;grid-template-columns:max-content minmax(0,1fr);gap:10px 18px;margin:12px 0 0}
.sso-facts dt{font-weight:700;color:var(--ink);padding-top:2px}
.sso-facts dd{margin:0;color:var(--ink-2);min-width:0}
.sso-facts dd p{margin:0 0 6px;overflow-wrap:anywhere}
.sso-facts code{font-family:"IBM Plex Mono",monospace;font-size:13px;color:var(--ink);background:var(--ground);border-radius:6px;padding:1px 6px;overflow-wrap:anywhere;word-break:break-all}
.sso-fieldset{border:0;margin:0;padding:0;min-width:0;display:flex;flex-direction:column;gap:6px}
.sso-fieldset[disabled]{opacity:1}
.sso-choice{border:1px solid var(--edge);border-radius:10px;padding:10px 12px;margin:4px 0 8px;min-width:0}
.sso-choice legend{font-weight:700;padding:0 4px;color:var(--ink)}
.sso-radio,.sso-check{display:inline-flex;align-items:center;gap:8px;margin:4px 16px 4px 0;min-height:44px;color:var(--ink);font-weight:500;cursor:pointer}
.sso-radio input,.sso-check input{width:20px;height:20px;flex:none;accent-color:var(--accent-deep)}
.sso-check:has(input:disabled){color:var(--mute);cursor:not-allowed}
.sso-settings input[type=text]{max-width:28rem;width:100%}
.sso-settings .btn{min-height:44px;margin-top:8px}
.sso-fieldset .sub{margin:0 0 6px}
.sso-how ul{margin:8px 0 0;padding-left:1.2rem;color:var(--ink-2)}
.sso-how li{margin:0 0 8px}

.sso-identities{border-top:1px solid var(--edge);margin-top:1rem}
.sso-identities h3{margin-block:1.25rem .35rem;font-size:1.05rem}
.sso-identity-list{list-style:none;margin:.5rem 0 0;padding:0;display:flex;flex-direction:column;gap:12px}
.sso-identity-list li{border:1px solid var(--edge);border-radius:10px;padding:10px 12px;min-width:0}
.sso-identity-list p{margin:0 0 4px;overflow-wrap:anywhere}
.sso-identity-list .btn{min-height:44px;margin-top:6px}
@media (max-width:600px){.sso-facts{grid-template-columns:minmax(0,1fr)}.sso-facts dt{margin-top:6px}}