Auth model
OIDCReference IdP active for local verification.
Secure operator access
OIDC sign-in with server-managed sessions, safe redirect-back behavior, and a tenant-aware shell that keeps privilege on the server side.
Login flow
Redirect to reference IdP
Browser reaches the OIDC authorization flow.
Create server session
Opaque session cookie stays out of client JS.
Return to work
Coality lands on the intended route after callback.
Auth model
OIDCReference IdP active for local verification.
Session cookie
Server-managedhttpOnly and same-site aware.
OIDC Sign-In
Sign in with the local Keycloak realm to establish a server-managed Coality session. The API stores the opaque session token in an httpOnly cookie and keeps tenant scope on the server side.
After sign-in, Coality will return you to /command-center.
Sign in with KeycloakWhat this sign-in unlocks
Land directly in the command center, incidents workspace, or settings route you requested before authentication.