Authentication and authorization infrastructure built on OIDC and OAuth 2.1 — with multi-tenancy, SSO, and RBAC out of the box.