NAVCOM-ID overview

NAVCOM-ID is the OAuth 2.1 / OpenID Connect identity provider on https://navcom.ai. Relying parties (RPs) let players click Sign in with NAVCOM and receive a verified identity: stable sub (portal user id), optional RSI handle, public orgs, enlisted date, Discord user id, and a real verified email. v1 applications are public: apply at /developers and the client is approved immediately. Authorize will not accept a disabled client_id. Staff can still view, disable, and inspect usage. Account extras (portal, not the IdP grant): optional TOTP 2FA, ZIP data export, discover-by-identity toggle (default off). Discord Linked Roles metadata (verified, enlisted, org_rank) is a badge only; org SID enforcement stays NAVCOM-Bot. Do not send secrets, tokens, or passwords in support tickets.