Capabilities and boundaries#

The guides and API contract describe the implementation. They also document unsupported profiles and features without effect; check these boundaries before building a dependency on a feature.

Identity and tenancy#

Realms, organizations, users, groups, invitations, projects, applications and API resources provide separate identity and application boundaries. Organization membership is not automatically realm-wide authority. Use the organization context from verified claims and trusted resource data.

Authentication and protocols#

Authorization code with PKCE, client credentials, headless authentication, passkeys, password and MFA flows, device authorization, upstream federation and declared SAML profiles are documented in the protocol and integration guides. No OAuth password grant, implicit grant or embedded browser login console is provided. Inspect discovery metadata and the compatibility profile for precise support, algorithms and excluded features.

Authorization and extensions#

Role/permission decisions, relationship authorization, access reviews, temporary elevation and audited support access are available through their APIs. Hooks, signed webhooks, workflows and plugins use bounded, versioned contracts. Plugins do not execute arbitrary code inside the identity process.

Operations#

Backups, restore reconciliation, key rotation, audit retention, migration, exports and resource limits have operator runbooks. Laptop benchmarks are published with their configuration and pass criteria. They are reference measurements, not sizing advice or performance guarantees.

Release and assurance#

There is no official tagged release or public SDK package publication yet. The source repository remains private. The service is not independently security reviewed or certified. Protocol conformance and third-party interoperability are limited to the specific profiles and versions recorded in the guides.

This page does not turn planned requirements into availability claims. See compatibility, interoperability, configuration and security checks.