[YarosVas]

Summary

Adds a new identity provider guide for Hideez Workforce Identity at
content/docs/integrations/user-identity/hideez.mdx.

The page covers:

• Create a Hideez OIDC Application: Integrations → OpenID Connect →
  Web Application, with Authorization Code and Refresh Token grants, the
  authenticate_service_url + /oauth2/callback redirect URI, PKCE left on,
  where to find the Client Id / Client Secret and the Issuer, and the group
  assignment Hideez requires before users can sign in. Five screenshots
  under img/hideez/.
• Configure Pomerium: idp_provider: oidc, the Hideez Issuer as
  idp_provider_url (it ends with a trailing slash), and scopes
  openid,profile,email,offline_access, in config file and environment
  variable tabs.
• Authorization Policies: an email criterion example.

Also adds hideez to cspell.json. No existing pages or shared components
are changed.

How this was tested

Pomerium (pomerium/pomerium:latest and pomerium/verify:latest in Docker
Compose, authenticate_service_url: https://authenticate.localhost.pomerium.io)
against a Hideez Workforce Identity cloud tenant, using the settings from the
page. A user assigned to the application signed in with a passkey, and the
verify route showed "Identity found and verified" with the user's email.
Without the group assignment, Hideez returns "Access to the application is
denied", which the page mentions.

AI disclosure

Tool: Claude (Anthropic), via Claude Code.
Extent: Claude drafted the page text and this description, helped set up the
Docker test environment from the Pomerium quickstart, and cropped, outlined
and blurred the screenshots with a script. The screenshots are real captures
of the Hideez console. I ran the sign-in test myself, and I reviewed and
edited all text and settings.

Checklist

• reference any related issues (none)
• disclosed AI usage (or wrote "none") per AI_POLICY.md

[netlify]

👷 Deploy request for pomerium-docs pending review.

Visit the deploys page to approve it

Name	Link
🔨 Latest commit	5b21122

[CLAassistant]

All committers have signed the CLA.