Question: Can the AuthZ Server Be Adapted for Non‑OAuth Flows?

Josh says the authorization server is flexible, can federate various auth methods, and should emit a consistent token model to the org.