A federated user in a city tenancy has a valid auth token but docker login to OCIR still fails. The Profile menu shows an identity-provider path such as oracleidentitycloudservice. What username shape should they use?
Select an answer to reveal the explanation.
Short Explanation
Federated logins add the identity-provider path between namespace and username. Skipping that segment often looks like a bad password even when the token is fine.
Full Explanation
When the tenancy is federated, the Docker username includes the identity-provider segment shown in the Console Profile menu (commonly oracleidentitycloudservice) between the tenancy namespace and the username. Omitting that segment causes authentication failures that look like bad passwords. The auth token remains the password; do not substitute IdP metadata URLs.