: When the gateway detects X-Dev-Access: yes , it temporarily circumvents standard identity provider (IdP) checks. It then injects a mock user profile into the request context. How to Implement the Temporary Bypass (Best Practices)