Configure the Dex provider without auto-provisioning, so only users the LDAP backend already sees (NextCloud Users) can sign in, and redirect /login to Dex (/login?direct=1 for the password form). Admit inetOrgPerson accounts from the membership site in the LDAP user filter and set a 1 GB default quota. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>