Local password auth

Salem OS Login

SuperAdmin users are routed to /superadmin; client users are routed to their tenant workspace.

SuperAdmin users with 2FA enabled must complete a second-factor challenge before a session is issued.

No local password credentials are configured yet. Run SALEM_OS_AUTH_EMAIL=... SALEM_OS_AUTH_PASSWORD=... npm run auth:set-password from inside Salem OS.

SuperAdmin 2FA is enforced when enabled for a SuperAdmin account. Configure it before live client use.

Mode: production. Data source: control database. This shell uses local password/session auth and is not production-ready.