sso_vault_unavailable
The token vault is not configured, so the OIDC client secret (or, for SAML with signed requests or required encryption, the service provider's signing and encryption keys) cannot be sealed. Nothing changed.
Problem shape
Every non-2xx response is an RFC 9457 application/problem+json body. The type URI below is stable and machine-matchable, so branch on the final path segment (the code) and treat the status as redundant confirmation. See the error-handling guide.
{
"type": "https://docs.vocapable.com/errors/sso_vault_unavailable",
"title": "…",
"status": 503,
"detail": "…",
"instance": "/v1/…"
}