Security

  • Keycloak SSO, OIDC, SAML
  • RBAC with least privilege
  • Audit trails and immutable logs