Authentication Setup

Users authenticate to the example service's administrative console through a federated identity provider rather than a local username and password. The application API accepts short-lived tokens issued after that federated login.

Note

Service-to-service calls within the example environment use a separate mechanism from user authentication: short-lived credentials issued per workload rather than a shared secret.

Session tokens expire after a fixed period of inactivity, and a re-authentication is required for any administrative action considered sensitive, such as changing another user's permissions.