Awad Mackie

Right, that test looks like it's attempting to assert that `freeze_time` accepts the time at the provided `tz_offset` instead of the UTC time to freeze, which is what I would...

As a workaround, until `rootlesskit` is updated, it's possible to make it work with https://www.freedesktop.org/software/systemd/man/systemd-socket-proxyd.html, which requires an extra socket. The details get a bit fiddly, but it does work

An `ExecStartPre=/usr/bin/timeout 10 sh -c 'while ! [ -S %t/docker-inner.sock ]; do sleep 0.5s; done'` in `docker-proxy.service` is also helpful otherwise the initial CLI command can get an EOF while...

As a quick workaround just to get the correct NameID into the SAML, we managed to make it work using a claims mapping policy: ``` resource "azuread_claims_mapping_policy" "saml_nameid_fix" { display_name...