Sign-in, not pairing
Technicians sign in through your identity provider with OpenID Connect. Authentik is the first one it is being built against. Computers keep no list of technician devices: a signed-in device gets a pass that runs out, after an hour by default.
