I’ve noticed the too-broad matching behavior in the past myself. Password for <production>-admin.okta.com will auto fill for <development>-admin.okta.com, for i

I’ve noticed the too-broad matching behavior in the past myself. Password for <production>-admin.okta.com will auto fill for <development>-admin.okta.com, for instance. I also turn off auto fill for this reason. I think the default matching behavior should be changed, and the handling of HTTP Basic Auth should be changed to conform to it.