Stored identity data
The service stores the information required to identify an account across Oasis applications: username, email address, basic profile fields, account status, stable identity ID, and authentication timestamps.
Credentials
Passwords are stored only as one-way encoded hashes. Plaintext passwords are never retained. Compatible Django password hashes may be migrated unchanged and are replaced with the current Oasis Identity format after a successful login.
Sessions and auditing
Secure, HTTP-only cookies maintain browser sessions. Administrative actions and migration outcomes are recorded so sensitive identity changes can be reviewed.
Access requests
Self-registration is disabled. Contact an Oasis administrator if you need an account, a credential reset, or changes to your identity information.