Mobile phone verification and tenant discovery for OpComm
One-time codes delivered by SMS confirm the user controls the phone they entered. Multi-layer rate limiting and a global circuit breaker keep abuse contained.
Verified phones are matched to OpComm hospitals across the platform, returning a picker so the user can choose which tenant to sign in to.
The selected tenant's identity and configuration endpoints are returned to the mobile app, which then bootstraps and completes OAuth at the right environment.