anchor.diff:  <1> This provider name is prefixed to logins to form an identity name.
   <2> When `true`, unauthenticated token requests from non-web clients (like `osc`) will be sent a WWW-Authenticate challenge header for this provider.
   <3> When `true`, unauthenticated token requests from web clients (like the web console) will be redirected to a login page backed by this provider.
  +====
   
   ==== HTPasswd [[HTPasswdPasswordIdentityProvider]]
   
  
positive.code: <2> When `true`, unauthenticated token requests from non-web clients (like `osc`) will be sent a WWW-Authenticate challenge header for this provider.
  <3> When `true`, unauthenticated token requests from web clients (like the web console) will be redirected to a login page backed by this provider.
  <4> File generated using http://httpd.apache.org/docs/2.4/programs/htpasswd.html[htpasswd].
  
  ==== Basic-Auth (remote) [[BasicAuthPasswordIdentityProvider]]
  
  
negative.code: To specify the signing and encryption secret to use, specify a `sessionSecretsFile`. This allows you separate secret values from the config file, and keep the config file distributable for debugging, etc.
  
  Master config:
  ====
  ----
  oauthConfig:
    ...
  