The first Pocket ID login linked to the existing account by email, then GTS_OIDC_LINK_EXISTING was switched off so only that Pocket ID identity can sign in. The Authentik credentials stay in the vault for rollback. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>