# Demo Screencast: OIDC SSO Flows

## Context
Record a demo video showing the three OIDC/SSO flows working end-to-end against auth.josie.cloud.

## Approach
1. Reset test state (clear sso_accountid, log out)
2. Use Playwright to drive browser through each flow, taking screenshots at key steps
3. Stitch screenshots into a video with ffmpeg (2-3s per frame, crossfade transitions)

## Flows to Demo

### Flow 1: SSO Login
- `/login/` page with "Login with SSO" link
- Keycloak login page
- Redirect back, logged in with dev navbar

### Flow 2: SSO Account Linking
- Log out, log in with password
- Profile page showing "Not linked" with link
- `/devel/link-sso/` page with "Link SSO Account" button
- Success: "SSO account linked successfully"

### Flow 3: SSO Account Unlinking
- Link SSO page showing "Unlink SSO Account" button
- Success: "SSO account unlinked"

## Output
- Screenshots saved to `/tmp/archweb-demo/`
- Final video at `/tmp/archweb-demo/oidc-demo.mp4`