Emergency operator access

Use this only when SSO is unavailable. Every break-glass sign-in is written to the access audit trail and should be followed by credential rotation.