Platform Concepts

The central concepts that describe the logic of the platform. Each page explains one mechanism: what it does, which rules apply to it, and how the parts of the platform use it.

Concept	Subject
Authorization Data Model	How a Role, a Permission and an Assignment give a user access, and how a Scope limits that access
Authentication Flow	How a person proves an identity, with OAuth2 and OIDC against KeycloakKeycloakAn open-source Identity and Access Management (IAM) solution providing SSO and OAuth2/OpenID Connect flows. In CIVITAS/CORE it is used to authenticate users and issue JWTs.
Model Centric Dataflow	How a model, not a program, controls the flow of data through the platform