Well, that was embarrassing, thanks @baris. @julian, someone's got to test these sorts of things. All good now.

@José-Ángel-Rey-Liñares I don't believe Kano uses NodeBB anymore, though I could be mistaken. We still recommend https://github.com/julianlam/nodebb-plugin-sso-oauth, though if you have a login API that takes username/password, you could also consider writing a plugin that listens on the action:auth.overrideLogin hook...