Sign in

Owner-only access (D-015). Your token subject must appear in ADMIN_SUBJECT_ALLOWLIST on card-admin-api. MFA is enforced by your IdP when configured (Authentik) or via ADMIN_REQUIRE_MFA on the API.

After first sign-in, copy your JWT sub from the dashboard session panel into ADMIN_SUBJECT_ALLOWLIST if API calls return 403.