Architectural Guarantees
JWT and opaque session token management with multi-device session revocation.
Support for OAuth2, SAML 2.0 (Okta/Azure AD), and Google Workspace login.
Hardware security key (WebAuthn/FIDO2) and TOTP two-factor authentication.