Proof of Presence (PoP) – General Availability across all identity providers [GA]

Value Prop

Proof of Presence requires developers to re-authenticate through their organization's identity provider before completing high-impact actions like merging or approving pull requests. This protection now works across all major SSO providers—including Okta, Ping, and any SAML or OIDC-compatible IdP—so every team benefits regardless of which identity provider they use. Organizations get stronger, identity-backed verification at the moments that matter most, powered by their existing MFA setup.

Expected Outcome

With Proof of Presence generally available across all identity providers, organizations can consistently enforce re-authentication at critical points in the software development lifecycle. Routing verification through each team's own IdP and MFA gives security teams confidence that only authorized contributors can merge or approve code changes. This reduces the risk of unauthorized changes from compromised accounts and helps teams meet security and compliance requirements without adding unnecessary friction to everyday workflows.

该 issue 未提供可供检查的 repository 文件、测试或实现入口。首先明确 Proof of Presence 在 Okta、Ping、SAML 和兼容 OIDC 的身份提供商上的产品范围；对于所有受支持的提供商，在高影响操作之前重新认证都能一致地正常工作，即视为完成。