What's Changed
- Document why pwmanager<->idp1 SAML metadata is intentionally missing by @briskt in #482
- Consolidate last-login marking into a new terminal loginfinalizer module by @briskt in #481
- Add DynamoDB login logging on the authoritative IdP by @briskt in #483
Full Changelog: 12.3.3...12.4.0