Repo: darkedges/pf12.3-biscuit-datalog-tokens Part 2 built a token generator plugin. On its own it does nothing: PingFederate needs a login, an access token manager, a client, a processor policy, a generator instance, a generator group and a mapping between them before a single Biscuit comes out. This part configures all of that with Terraform, then runs the full flow in a browser: log in, exchange, call an API, get refused, and see why. 1. The stack docker-compose.yam...